CVE-2026-65559WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WooCommerce Published 08/06/2026 Severity High CVE-2026-65557WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 07/27/2026 Severity Medium CVE-2026-57637WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 06/26/2026 Severity Medium CVE-2026-56060WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 06/26/2026 Severity High CVE-2026-56048WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product P Payment Gateway Based Fees and Discounts for WooCommerce Published 06/26/2026 Severity Medium CVE-2026-42386WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WooCommerce Published 06/15/2026 Severity Critical CVE-2026-6447Call for Price for WooCommerce <= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings Exploitation status Not known exploited Fix Affected product C Call for Price for WooCommerce Published 05/02/2026 Severity Medium CVE-2026-25317WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 03/25/2026 Severity High CVE-2026-24946WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 02/20/2026 Severity Medium CVE-2025-69027WordPress Product Delivery Date for WooCommerce – Lite plugin <= 3.2.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P Product Delivery Date for WooCommerce – Lite Published 12/30/2025 Severity Medium CVE-2025-13773Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 12/24/2025 Severity Critical CVE-2025-63024WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WooCommerce Published 12/09/2025 Severity Medium CVE-2025-13835WordPress Arconix Shortcodes plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 12/01/2025 Severity Medium CVE-2025-66085WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 11/21/2025 Severity Medium CVE-2025-66071WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C Custom Order Numbers for WooCommerce Published 11/21/2025 Severity Medium CVE-2025-58599WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WooCommerce Published 09/03/2025 Severity Medium CVE-2025-2942Order Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure Exploitation status Public exploit Fix Affected product O Order Delivery Date Published 07/11/2025 Severity Medium CVE-2025-49858WordPress Arconix Shortcodes plugin <= 2.1.17 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 06/17/2025 Severity Medium CVE-2025-49874WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product A Arconix FAQ Published 06/17/2025 Severity Medium CVE-2025-49239WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 06/06/2025 Severity Medium CVE-2025-47673WordPress Arconix Shortcodes plugin <= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 05/23/2025 Severity High CVE-2025-2929Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS Exploitation status Public exploit Fix Affected product O Order Delivery Date Published 05/20/2025 Severity High CVE-2025-2907Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update Exploitation status Public exploit Fix Affected product O Order Delivery Date Published 04/26/2025 Severity Critical CVE-2025-24621WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 04/17/2025 Severity High CVE-2025-32531WordPress Arconix FAQ plugin <= 1.9.5 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Arconix FAQ Published 04/17/2025 Severity High CVE-2024-13359Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload Exploitation status Not known exploited Fix Affected product P Product Input Fields for WooCommerce Published 03/08/2025 Severity High CVE-2024-13640Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 03/08/2025 Severity Medium CVE-2024-56242WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 01/02/2025 Severity Medium CVE-2024-12210Print Invoice & Delivery Notes for WooCommerce <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 12/24/2024 Severity Medium CVE-2023-41671WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 12/13/2024 Severity Medium CVE-2022-46795WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability Exploitation status Not known exploited Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 12/13/2024 Severity Medium CVE-2024-10857Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read Exploitation status Not known exploited Fix Affected product P Product Input Fields for WooCommerce Published 11/26/2024 Severity Medium CVE-2024-10882Product Delivery Date for WooCommerce - Lite <= 2.8.0 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Product Delivery Date for WooCommerce – Lite Published 11/13/2024 Severity Medium CVE-2024-38769WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 11/01/2024 Severity Medium CVE-2024-38783WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product A Arconix FAQ Published 11/01/2024 Severity Medium CVE-2024-10226Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 10/29/2024 Severity Medium CVE-2024-9703Arconix Shortcodes <= 2.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 10/18/2024 Severity Medium CVE-2024-9345Product Delivery Date for WooCommerce – Lite <= 2.7.3 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product P Product Delivery Date for WooCommerce – Lite Published 10/04/2024 Severity Medium CVE-2024-0678Order Delivery Date for WP e-Commerce <= 1.2 - Unauthenticated Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WP e-Commerce Published 02/05/2024 Severity Medium CVE-2023-0479Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS Exploitation status Public exploit Fix Affected product P Print Invoice & Delivery Notes for WooCommerce Published 01/16/2024 Severity Medium CVE-2023-44986WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 10/16/2023 Severity Medium CVE-2023-41858WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WP e-Commerce Published 10/10/2023 Severity Medium CVE-2023-41859WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WP e-Commerce Published 10/02/2023 Severity Medium CVE-2023-41874WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product O Order Delivery Date for WooCommerce Published 09/25/2023 Severity High CVE-2021-4414Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypass Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 07/12/2023 Severity Medium CVE-2019-25152Abandoned Cart Lite for WooCommerce < 5.2.0 and Abandoned Cart Pro for WooCommerce < 7.13.0 - Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 06/22/2023 Severity High CVE-2023-2986Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass Exploitation status Not known exploited Fix Affected product A Abandoned Cart Lite for WooCommerce Published 06/08/2023 Severity Critical CVE-2020-36696Product Input Fields for WooCommerce <= 1.2.6 - Missing Authorization Exploitation status Not known exploited Fix Affected product P Product Input Fields for WooCommerce Published 06/07/2023 Severity High CVE-2022-45367WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product C Custom Order Numbers for WooCommerce Published 05/25/2023 Severity Medium CVE-2023-23703WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product A Arconix Shortcodes Published 05/16/2023 Severity Medium 
