CVE-2026-42386 Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions

Description

Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.

Affected products and versions

Product	Affected versions	Fixed in
Order Delivery Date for WooCommerce 4.5	earliest → 4.5.1	No fix stated

Other CVEs of Order Delivery Date for WooCommerce

The 4 CVEs of Order Delivery Date for WooCommerce →

CVE-2026-65559 Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions 7.2 High CVE-2025-63024 Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce… 5.4 Medium CVE-2025-58599 Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce… 4.3 Medium