Tychesoftwares vulnerabilities
We track 10 vulnerabilities in Tychesoftwares products across 8 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
Latest Tychesoftwares vulnerabilities
- 7.5 High severity
Print Invoice & Delivery Notes for WooCommerce: Missing Authorization
Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCom
- 9.8 Critical severity
Print Invoice & Delivery Notes for WooCommerce: Improper Control of Generation of Code
The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update' function. This is due to missing capability check in the 'Wo
- 7.1 High severity
Arconix Shortcodes: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through <= 2.1.16.
- 7.1 High severity
Order Delivery Date: Improper Neutralization of Input During Web Page Generation
The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
- 9.8 Critical severity
Order Delivery Date: Cross-Site Request Forgery
The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper checks to only update options relevant to the Order Delivery Date WordPress plugin before 12.3.1. This
- 7.1 High severity
Arconix FAQ: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix FAQ arconix-faq allows Reflected XSS.This issue affects Arconix FAQ: from n/a through <= 1.9.5.
- 7.1 High severity
Arconix Shortcodes: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes arconix-shortcodes allows Reflected XSS.This issue affects Arconix Shortcodes: from n/a through <= 2.1.15.
- 9.8 Critical severity
Product Input Fields for WooCommerce: Unrestricted Upload of File with Dangerous Type
The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the add_product_input_fields_to_order_item_meta() function in all versions up to, and including, 1.12.0. This may
- 8.8 High severity
Booking & Appointment Plugin for WooCommerce: Improper Authorization
The Booking & Appointment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_google_calendar_data' function in versions up to, and including, 6.9.0. This makes it possib
- 9.8 Critical severity
Abandoned Cart Lite for WooCommerce: Authentication Bypass Using an Alternate Path or Channel
The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the pl