5.4
Medium
CVE-2025-63024 Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce…
Description
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through <= 4.3.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Order Delivery Date for WooCommerce 4.3 | earliest → 4.3.1 | No fix stated |
Other CVEs of Order Delivery Date for WooCommerce
The 4 CVEs of Order Delivery Date for WooCommerce →
CVE-2026-65559
Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions
7.2
High
CVE-2026-42386
Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions
9.3
Critical
CVE-2025-58599
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce…
4.3
Medium