ByConsole

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ByConsole records in CISA KEV

No ByConsole vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wooodt Lite 3 records MEDIUM Pickup | Delivery | Dine-in Date Time 1 record MEDIUM

Records

3 records in Wooodt Lite · all components

TI-2023-25502 CVE-2023-47179 · GHSA-mhhf-6vwh-c57m

WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

MEDIUM 42

Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01195 Published 2025-01-02 No fix listed CWE-862

TI-2023-24067 CVE-2023-45006 · GHSA-w25r-hpmc-xhc2

WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ByConsole WooODT Lite – WooCommerce Order Delivery or Pickup with Date Time Location plugin <= 2.4.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-17 No fix listed CWE-79

TI-2024-12581 CVE-2024-13540 · GHSA-5782-28w3-v3q8

WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure

LOW 30

The WooODT Lite – Delivery & pickup date time location for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.5.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00418 Published 2025-02-18 No fix listed CWE-209

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0