Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

tychesoftwares — Vulnerabilities & Security Advisories 37

Browse all 37 CVE security advisories affecting tychesoftwares. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Tychesoftwares operates primarily in the software development and IT services sector, providing enterprise solutions that often involve complex web applications and database management systems. Historical security audits reveal a pattern of vulnerabilities typical for mid-sized software vendors, with Remote Code Execution (RCE) and Cross-Site Scripting (XSS) representing the most frequent critical flaws. These issues often stem from insufficient input validation and improper access controls within their proprietary platforms. While no single catastrophic data breach has been widely publicized, the accumulation of 31 Common Vulnerabilities and Exposures (CVEs) indicates a recurring struggle with secure coding practices. The organization has generally responded to disclosures by issuing patches, yet the high volume of recorded incidents suggests systemic weaknesses in their development lifecycle. This profile highlights the need for rigorous third-party security assessments to mitigate the risk of exploitation in their deployed environments.

CVE ID Title CVSS Severity Published
CVE-2026-65559 WordPress Order Delivery Date for WooCommerce plugin <= 4.6.0 - Privilege Escalation vulnerability — Order Delivery Date for WooCommerce CWE-266 7.2 High 2026-08-06
CVE-2026-65557 WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Scripting (XSS) vulnerability — Abandoned Cart Lite for WooCommerce CWE-79 5.9 Medium 2026-07-27
CVE-2026-57637 WordPress Abandoned Cart Lite for WooCommerce plugin <= 6.8.0 - Cross Site Request Forgery (CSRF) vulnerability — Abandoned Cart Lite for WooCommerce CWE-352 4.3 Medium 2026-06-26
CVE-2026-56060 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 7.1.1 - Sensitive Data Exposure vulnerability — Print Invoice & Delivery Notes for WooCommerce CWE-497 7.5 High 2026-06-26
CVE-2026-56048 WordPress Payment Gateway Based Fees and Discounts for WooCommerce plugin <= 3.0.0 - Insecure Direct Object References (IDOR) vulnerability — Payment Gateway Based Fees and Discounts for WooCommerce CWE-639 6.5 Medium 2026-06-26
CVE-2026-42386 WordPress Order Delivery Date for WooCommerce plugin <= 4.5.1 - SQL Injection vulnerability — Order Delivery Date for WooCommerce CWE-89 9.3 Critical 2026-06-15
CVE-2026-6447 Call for Price for WooCommerce <= 4.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Call for Price' Label Settings — Call for Price for WooCommerce CWE-79 4.4 Medium 2026-05-02
CVE-2026-25317 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.9.0 - Broken Access Control vulnerability — Print Invoice & Delivery Notes for WooCommerce CWE-862 7.5 High 2026-03-25
CVE-2026-24946 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability — Print Invoice & Delivery Notes for WooCommerce CWE-862 6.5 Medium 2026-02-20
CVE-2025-69027 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 3.2.0 - Broken Access Control vulnerability — Product Delivery Date for WooCommerce – Lite CWE-862 5.3 Medium 2025-12-30
CVE-2025-13773 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution — Print Invoice & Delivery Notes for WooCommerce CWE-94 9.8 Critical 2025-12-24
CVE-2025-63024 WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability — Order Delivery Date for WooCommerce CWE-862 5.4 Medium 2025-12-09
CVE-2025-13835 WordPress Arconix Shortcodes plugin <= 2.1.20 - Cross Site Scripting (XSS) vulnerability — Arconix Shortcodes CWE-79 6.5 Medium 2025-12-01
CVE-2025-66085 WordPress Arconix Shortcodes plugin <= 2.1.18 - Broken Access Control vulnerability — Arconix Shortcodes CWE-862 4.3 Medium 2025-11-21
CVE-2025-66071 WordPress Custom Order Numbers for WooCommerce plugin <= 1.11.0 - Broken Access Control vulnerability — Custom Order Numbers for WooCommerce CWE-862 5.3 Medium 2025-11-21
CVE-2025-58599 WordPress Order Delivery Date for WooCommerce Plugin <= 4.1.0 - Broken Access Control Vulnerability — Order Delivery Date for WooCommerce CWE-862 4.3 Medium 2025-09-03
CVE-2025-49858 WordPress Arconix Shortcodes plugin <= 2.1.17 - Cross Site Scripting (XSS) Vulnerability — Arconix Shortcodes CWE-79 6.5 Medium 2025-06-17
CVE-2025-49874 WordPress Arconix FAQ plugin <= 1.9.6 - Broken Access Control Vulnerability — Arconix FAQ CWE-862 4.3 Medium 2025-06-17
CVE-2025-49239 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.5.0 - Cross Site Request Forgery (CSRF) Vulnerability — Print Invoice & Delivery Notes for WooCommerce CWE-352 5.4 Medium 2025-06-06
CVE-2025-47673 WordPress Arconix Shortcodes plugin <= 2.1.16 - Reflected Cross Site Scripting (XSS) vulnerability — Arconix Shortcodes CWE-79 7.1 High 2025-05-23
CVE-2025-24621 WordPress Arconix Shortcodes plugin <= 2.1.15 - Reflected Cross Site Scripting (XSS) vulnerability — Arconix Shortcodes CWE-79 7.1 High 2025-04-17
CVE-2025-32531 WordPress Arconix FAQ plugin <= 1.9.5 - Reflected Cross Site Scripting (XSS) vulnerability — Arconix FAQ CWE-79 7.1 High 2025-04-17
CVE-2024-13359 Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload — Product Input Fields for WooCommerce CWE-434 8.1 High 2025-03-08
CVE-2024-13640 Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory — Print Invoice & Delivery Notes for WooCommerce CWE-200 5.9 Medium 2025-03-08
CVE-2024-56242 WordPress Arconix Shortcodes plugin <= 2.1.14 - Cross Site Scripting (XSS) vulnerability — Arconix Shortcodes CWE-79 6.5 Medium 2025-01-02
CVE-2024-12210 Print Invoice & Delivery Notes for WooCommerce <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion — Print Invoice & Delivery Notes for WooCommerce CWE-862 4.3 Medium 2024-12-24
CVE-2023-41671 WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability — Abandoned Cart Lite for WooCommerce CWE-862 5.4 Medium 2024-12-13
CVE-2024-10857 Product Input Fields for WooCommerce <= 1.9 - Authenticated (Contributor+) Arbitrary File Read — Product Input Fields for WooCommerce CWE-35 6.5 Medium 2024-11-26
CVE-2024-10882 Product Delivery Date for WooCommerce - Lite <= 2.8.0 - Reflected Cross-Site Scripting — Product Delivery Date for WooCommerce – Lite CWE-79 6.1 Medium 2024-11-13
CVE-2024-10226 Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode — Arconix Shortcodes CWE-79 6.4 Medium 2024-10-29

This page lists every published CVE security advisory associated with tychesoftwares. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.