Vulnerabilities

TI-2024-12581 CVE-2024-13540 · GHSA-5782-28w3-v3q8

WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure

LOW 30

The WooODT Lite – Delivery & pickup date time location for WooCommerce plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.5.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00418 Published 2025-02-18 No fix listed CWE-209

TI-2023-25502 CVE-2023-47179 · GHSA-mhhf-6vwh-c57m

WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

MEDIUM 42

Missing Authorization vulnerability in mdalabar WooODT Lite byconsole-woo-order-delivery-time allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooODT Lite: from n/a through <= 2.…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01195 Published 2025-01-02 No fix listed CWE-862

TI-2023-24067 CVE-2023-45006 · GHSA-w25r-hpmc-xhc2

WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ByConsole WooODT Lite – WooCommerce Order Delivery or Pickup with Date Time Location plugin <= 2.4.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-17 No fix listed CWE-79

Vulnerabilities

Filters

WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure

WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability

WordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)