Vendors / tychesoftwares Records 65 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 8 CVSS 9.0–10.0
CVSS high 17 CVSS 7.0–8.9
Exploited now tychesoftwares records in CISA KEV No tychesoftwares vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 2 records in Order Delivery Date For Wp E-commerce · all components
Priority LOW 35
The Order Delivery Date for WP e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'available-days-tf' parameter in all versions up to, and including, 1.2 due to insufficient input saniti…
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00446 · Published 2024-02-05 · No fix listed CWE-79
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00369 · Published 2023-10-02 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical8 High17 Medium40 Low0 No CVSS0