PatchTheCVEtychesoftwares vulnerabilities
Recent CVEs affecting tychesoftwares products. 11 tracked.
tychesoftwares has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-07-11. Highest priority: CVE-2025-2907 (score 62/100).
- CVE-2025-2942 MEDIUM 4.3 UPGRADE The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and
- CVE-2025-2907 CRITICAL 9.8 UPGRADE The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when import
- CVE-2024-9703 MEDIUM 6.4 UPGRADE The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'but
- CVE-2024-9345 MEDIUM 6.1 UPGRADE The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Sc
- CVE-2024-56242 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesof
- CVE-2024-38783 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Tyche Softwares Arconix FAQ allows Accessing Functionality Not Properly
- CVE-2024-38769 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not P
- CVE-2024-13359 HIGH 8.1 UPGRADE The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to i
- CVE-2024-10857 MEDIUM 6.5 UPGRADE The Product Input Fields for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all vers
- CVE-2024-10226 MEDIUM 6.4 UPGRADE The Arconix Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box
- CVE-2022-46795 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows E
FAQ
How do I fix tychesoftwares vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tychesoftwares being exploited right now?
None of the tracked tychesoftwares CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tychesoftwares CVE should I patch first?
CVE-2025-2907 currently ranks highest (62/100): The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when import.