vciy

CVEs we hold for Tychesoftwares

Records whose assigning authority named Tychesoftwares as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-65559WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerabilitytychesoftwares Order Delivery Date for WooCommerce
CVE-2026-65557WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerabilityTychesoftwares Abandoned Cart Lite for WooCommerce
CVE-2026-6447Call for Price for WooCommerce <= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for…tychesoftwares Call for Price for WooCommerce
CVE-2026-57637WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerabilitytychesoftwares Abandoned Cart Lite for WooCommerce
CVE-2026-56060WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerabilitytychesoftwares Print Invoice & Delivery Notes for…
CVE-2026-56048WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References…tychesoftwares Payment Gateway Based Fees and Discounts for…
CVE-2026-42386WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerabilitytychesoftwares Order Delivery Date for WooCommerce
CVE-2026-25317WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerabilitytychesoftwares Print Invoice & Delivery Notes for…
CVE-2026-24946WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerabilitytychesoftwares Print Invoice & Delivery Notes for…
CVE-2025-69027WordPress Product Delivery Date for WooCommerce – Lite plugin <= 3.2.0 - Broken Access Control vulnerabilitytychesoftwares Product Delivery Date for WooCommerce – Lite
CVE-2025-66085WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken Access Control vulnerabilitytychesoftwares Arconix Shortcodes
CVE-2025-66071WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerabilitytychesoftwares Custom Order Numbers for WooCommerce
CVE-2025-63024WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerabilitytychesoftwares Order Delivery Date for WooCommerce
CVE-2025-58599WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerabilitytychesoftwares Order Delivery Date for WooCommerce
CVE-2025-49874WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerabilitytychesoftwares Arconix FAQ
CVE-2025-49858WordPress Arconix Shortcodes plugin <= 2.1.17 - Cross Site Scripting (XSS) Vulnerabilitytychesoftwares Arconix Shortcodes
CVE-2025-49239WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF)…tychesoftwares Print Invoice & Delivery Notes for…
CVE-2025-47673WordPress Arconix Shortcodes plugin <= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerabilitytychesoftwares Arconix Shortcodes
CVE-2025-32531WordPress Arconix FAQ plugin <= 1.9.5 - Reflected Cross Site Scripting (XSS) vulnerabilitytychesoftwares Arconix FAQ
CVE-2025-24621WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerabilitytychesoftwares Arconix Shortcodes
CVE-2025-13835WordPress Arconix Shortcodes plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerabilitytychesoftwares Arconix Shortcodes
CVE-2025-13773Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Executiontychesoftwares Print Invoice & Delivery Notes for…
CVE-2024-9703Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodetychesoftwares Arconix Shortcodes
CVE-2024-9345Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scriptingtychesoftwares Product Delivery Date for WooCommerce – Lite
CVE-2024-56242WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerabilitytychesoftwares Arconix Shortcodes
CVE-2024-13640Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through…tychesoftwares Print Invoice & Delivery Notes for…
CVE-2024-13359Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Uploadtychesoftwares Product Input Fields for WooCommerce
CVE-2024-12210Print Invoice & Delivery Notes for WooCommerce <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo…tychesoftwares Print Invoice & Delivery Notes for…
CVE-2024-10882Product Delivery Date for WooCommerce - Lite <= 2.8.0 - Reflected Cross-Site Scriptingtychesoftwares Product Delivery Date for WooCommerce – Lite
CVE-2024-10857Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Readtychesoftwares Product Input Fields for WooCommerce
CVE-2024-10226Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcodetychesoftwares Arconix Shortcodes
CVE-2024-0678Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scriptingtychesoftwares Order Delivery Date for WP e-Commerce
CVE-2023-41671WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerabilitytychesoftwares Abandoned Cart Lite for WooCommerce
CVE-2023-2986Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypasstychesoftwares Abandoned Cart Lite for WooCommerce
CVE-2021-4414Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypasstychesoftwares Abandoned Cart Lite for WooCommerce
CVE-2020-36696Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorizationtychesoftwares Product Input Fields for WooCommerce
CVE-2019-25152Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site…tychesoftwares Abandoned Cart Lite for WooCommerce…

37 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.