tychesoftwares kayıtları
tychesoftwares üreticisine ait 26 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12
- CWE-862 Missing Authorization4
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-285 Improper Authorization2
- CWE-35 Path Traversal: '.../...//'1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
26 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
52Planlayın | CVE-2023-2986Kavram kanıtı | Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypasstychesoftwares · abandoned cart lite for woocommerce · CWE-288 | Kritik9,8 | — | %42,5 | 7 Haz 2023 |
39İzleyin | CVE-2025-2907Kavram kanıtı | Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Updatetychesoftwares · order delivery date pro for woocommerce · CWE-352 | Kritik9,8 | — | %1,4 | 26 Nis 2025 |
39İzleyin | CVE-2024-13359İstismar yok | Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Uploadtychesoftwares · product input fields for woocommerce · CWE-434 | Kritik9,8 | — | %1,0 | 8 Mar 2025 |
35İzleyin | CVE-2024-10729İstismar yok | Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Updatetyche softwares · booking & appointment plugin for woocommerce · CWE-285 | Yüksek8,8 | — | %0,5 | 25 Kas 2024 |
35İzleyin | CVE-2023-41858İstismar yok | WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)tychesoftwares · order delivery date for woocommerce · CWE-352 | Yüksek8,8 | — | %0,2 | 10 Eki 2023 |
35İzleyin | CVE-2022-45367İstismar yok | WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)tychesoftwares · custom order numbers for woocommerce · CWE-352 | Yüksek8,8 | — | %0,2 | 25 May 2023 |
30İzleyin | CVE-2020-36696İstismar yok | Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorizationtychesoftwares · product input fields for woocommerce · CWE-285 | Yüksek7,5 | — | %1,0 | 6 Haz 2023 |
28İzleyin | CVE-2025-2929İstismar yok | Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSStychesoftwares · order delivery date for woocommerce · CWE-79 | Yüksek7,1 | — | %0,2 | 20 May 2025 |
26İzleyin | CVE-2024-10857İstismar yok | Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Readtychesoftwares · product input fields for woocommerce · CWE-35 | Orta6,5 | — | %0,7 | 26 Kas 2024 |
26İzleyin | CVE-2022-46795İstismar yok | WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerabilitytychesoftwares · print invoice \& delivery notes for woocommerce · CWE-862 | Orta6,5 | — | %0,6 | 13 Ara 2024 |
24İzleyin | CVE-2019-25152Kavram kanıtı | Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scriptingtychesoftwares · abandoned cart lite for woocommerce · CWE-79 | Orta6,1 | — | %1,3 | 21 Haz 2023 |
24İzleyin | CVE-2023-0479İstismar yok | Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSStychesoftwares · print invoice \& delivery notes for woocommerce · CWE-79 | Orta6,1 | — | %0,5 | 16 Oca 2024 |
24İzleyin | CVE-2024-0678İstismar yok | Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scriptingtychesoftwares · order delivery date for wp e-commerce · CWE-79 | Orta6,1 | — | %0,4 | 5 Şub 2024 |
24İzleyin | CVE-2023-41874İstismar yok | WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)tychesoftwares · order delivery date for woocommerce · CWE-79 | Orta6,1 | — | %0,4 | 24 Eyl 2023 |
24İzleyin | CVE-2024-9345İstismar yok | Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scriptingtychesoftwares · product delivery date for woocommerce · CWE-79 | Orta6,1 | — | %0,3 | 4 Eki 2024 |
21İzleyin | CVE-2024-38702İstismar yok | WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerabilitytyche softwares · product delivery date for woocommerce – lite · CWE-862 | Orta5,3 | — | %0,5 | 1 Kas 2024 |
21İzleyin | CVE-2024-38769İstismar yok | WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerabilitytychesoftwares · arconix shortcodes · CWE-862 | Orta5,3 | — | %0,3 | 1 Kas 2024 |
21İzleyin | CVE-2024-38783İstismar yok | WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerabilitytychesoftwares · arconix faq · CWE-862 | Orta5,3 | — | %0,3 | 1 Kas 2024 |
21İzleyin | CVE-2023-23703İstismar yok | WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)tychesoftwares · arconix shortcodes · CWE-79 | Orta5,4 | — | %0,3 | 16 May 2023 |
21İzleyin | CVE-2024-10226İstismar yok | Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcodetychesoftwares · arconix shortcodes · CWE-79 | Orta5,4 | — | %0,3 | 29 Eki 2024 |
21İzleyin | CVE-2024-9703İstismar yok | Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodetychesoftwares · arconix shortcodes · CWE-79 | Orta5,4 | — | %0,2 | 18 Eki 2024 |
21İzleyin | CVE-2024-56242İstismar yok | WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerabilitytychesoftwares · arconix shortcodes · CWE-79 | Orta5,4 | — | %0,2 | 2 Oca 2025 |
19İzleyin | CVE-2023-44986İstismar yok | WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)tychesoftwares · abandoned cart lite for woocommerce · CWE-79 | Orta4,8 | — | %0,3 | 16 Eki 2023 |
19İzleyin | CVE-2023-41859İstismar yok | WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)tychesoftwares · order delivery date for wp e-commerce · CWE-79 | Orta4,8 | — | %0,3 | 2 Eki 2023 |
17İzleyin | CVE-2021-4414İstismar yok | Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypasstychesoftwares · abandoned cart lite for woocommerce · CWE-352 | Orta4,3 | — | %0,3 | 12 Tem 2023 |
- CVE-2023-298652Planlayın
Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
KritikCVSS 9,8Kavram kanıtıEPSS %42tychesoftwares · abandoned cart lite for woocommerce7 Haz 2023
- CVE-2025-290739İzleyin
Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update
KritikCVSS 9,8Kavram kanıtıEPSS %1tychesoftwares · order delivery date pro for woocommerce26 Nis 2025
- CVE-2024-1335939İzleyin
Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload
KritikCVSS 9,8İstismar yokEPSS %1tychesoftwares · product input fields for woocommerce8 Mar 2025
- CVE-2024-1072935İzleyin
Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update
YüksekCVSS 8,8İstismar yokEPSS %0tyche softwares · booking & appointment plugin for woocommerce25 Kas 2024
- CVE-2023-4185835İzleyin
WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0tychesoftwares · order delivery date for woocommerce10 Eki 2023
- CVE-2022-4536735İzleyin
WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0tychesoftwares · custom order numbers for woocommerce25 May 2023
- CVE-2020-3669630İzleyin
Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization
YüksekCVSS 7,5İstismar yokEPSS %1tychesoftwares · product input fields for woocommerce6 Haz 2023
- CVE-2025-292928İzleyin
Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS
YüksekCVSS 7,1İstismar yokEPSS %0tychesoftwares · order delivery date for woocommerce20 May 2025
- CVE-2024-1085726İzleyin
Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read
OrtaCVSS 6,5İstismar yokEPSS %0tychesoftwares · product input fields for woocommerce26 Kas 2024
- CVE-2022-4679526İzleyin
WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0tychesoftwares · print invoice \& delivery notes for woocommerce13 Ara 2024
- CVE-2019-2515224İzleyin
Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1tychesoftwares · abandoned cart lite for woocommerce21 Haz 2023
- CVE-2023-047924İzleyin
Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS
OrtaCVSS 6,1İstismar yokEPSS %0tychesoftwares · print invoice \& delivery notes for woocommerce16 Oca 2024
- CVE-2024-067824İzleyin
Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0tychesoftwares · order delivery date for wp e-commerce5 Şub 2024
- CVE-2023-4187424İzleyin
WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0tychesoftwares · order delivery date for woocommerce24 Eyl 2023
- CVE-2024-934524İzleyin
Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0tychesoftwares · product delivery date for woocommerce4 Eki 2024
- CVE-2024-3870221İzleyin
WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0tyche softwares · product delivery date for woocommerce – lite1 Kas 2024
- CVE-2024-3876921İzleyin
WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0tychesoftwares · arconix shortcodes1 Kas 2024
- CVE-2024-3878321İzleyin
WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0tychesoftwares · arconix faq1 Kas 2024
- CVE-2023-2370321İzleyin
WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0tychesoftwares · arconix shortcodes16 May 2023
- CVE-2024-1022621İzleyin
Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0tychesoftwares · arconix shortcodes29 Eki 2024
- CVE-2024-970321İzleyin
Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0tychesoftwares · arconix shortcodes18 Eki 2024
- CVE-2024-5624221İzleyin
WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0tychesoftwares · arconix shortcodes2 Oca 2025
- CVE-2023-4498619İzleyin
WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0tychesoftwares · abandoned cart lite for woocommerce16 Eki 2023
- CVE-2023-4185919İzleyin
WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0tychesoftwares · order delivery date for wp e-commerce2 Eki 2023
- CVE-2021-441417İzleyin
Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass
OrtaCVSS 4,3İstismar yokEPSS %0tychesoftwares · abandoned cart lite for woocommerce12 Tem 2023