Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Tyche Softwares — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting Tyche Softwares. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Tyche Softwares develops enterprise resource planning (ERP) and customer relationship management (CRM) solutions for mid-sized businesses. Historically, their products have been susceptible to remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. The company has addressed multiple critical security issues, with 16 CVEs documented to date, including several high-severity flaws that could allow unauthorized system access or data compromise. While no major public security incidents have been widely reported, their vulnerability history suggests a pattern of security weaknesses in web application components and authentication mechanisms that require ongoing remediation efforts.

CVE ID Title CVSS Severity Published
CVE-2026-81543 Abandoned Cart Pro for WooCommerce <= 10.7.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation — Abandoned Cart Pro for WooCommerce CWE-269 8.8 High 2026-09-05
CVE-2023-52210 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.0 - Broken Access Control vulnerability — Product Delivery Date for WooCommerce – Lite 5.3 Medium 2025-12-23
CVE-2025-4387 Abandoned Cart Pro for WooCommerce <= 9.16.0 - Authenticated (Subscriber+) Arbitrary File Upload — Abandoned Cart Pro for WooCommerce CWE-434 8.8 High 2025-06-10
CVE-2022-46795 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability — Print Invoice & Delivery Notes for WooCommerce CWE-862 6.5 Medium 2024-12-13
CVE-2024-10729 Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update — Booking & Appointment Plugin for WooCommerce CWE-285 8.8 High 2024-11-26
CVE-2024-38702 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability — Product Delivery Date for WooCommerce – Lite CWE-862 5.3 Medium 2024-11-01
CVE-2024-38769 WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability — Arconix Shortcodes CWE-862 5.3 Medium 2024-11-01
CVE-2024-38783 WordPress Arconix FAQ plugin <= 1.9.4 - Broken Access Control vulnerability — Arconix FAQ CWE-862 5.3 Medium 2024-11-01
CVE-2024-4233 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares — Print Invoice & Delivery Notes for WooCommerce CWE-862 4.3 Medium 2024-05-08
CVE-2024-33585 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 2.12.1 - Broken Access Control vulnerability — Payment Gateway Based Fees and Discounts for WooCommerce CWE-862 4.3 Medium 2024-04-29
CVE-2024-31431 WordPress Product Input Fields for WooCommerce plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) vulnerability — Product Input Fields for WooCommerce CWE-352 4.3 Medium 2024-04-15
CVE-2024-31920 WordPress Currency per Product for WooCommerce plugin <= 1.6.0 - Cross Site Request Forgery (CSRF) vulnerability — Currency per Product for WooCommerce CWE-352 4.3 Medium 2024-04-15
CVE-2024-32434 WordPress Order Delivery Date for WooCommerce plugin <= 3.20.2 - Cross Site Request Forgery (CSRF) vulnerability — Order Delivery Date for WooCommerce CWE-352 4.3 Medium 2024-04-15
CVE-2023-44986 WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS) — Abandoned Cart Lite for WooCommerce CWE-79 5.9 Medium 2023-10-16
CVE-2023-41874 WordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS) — Order Delivery Date for WooCommerce CWE-79 7.1 High 2023-09-25
CVE-2022-45367 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) — Custom Order Numbers for WooCommerce CWE-352 4.3 Medium 2023-05-25
CVE-2023-23703 WordPress Arconix Shortcodes Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS) — Arconix Shortcodes CWE-79 6.5 Medium 2023-05-16

This page lists every published CVE security advisory associated with Tyche Softwares. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.