Order Delivery Date For Woocommerce

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-2942 MEDIUM POC PATCH This Month

A security vulnerability in Order Delivery Date WordPress (CVSS 4.3). Risk factors: public PoC available.

WordPress Information Disclosure Order Delivery Date For Woocommerce PHP

NVD WPScan

CVSS 3.1

4.3

EPSS

0.0%

CVE-2025-2929 HIGH POC This Week

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Order Delivery Date For Woocommerce PHP

NVD WPScan

CVSS 3.1

7.1

EPSS

0.2%

CVE-2025-2942

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

A security vulnerability in Order Delivery Date WordPress (CVSS 4.3). Risk factors: public PoC available.

WordPress Information Disclosure Order Delivery Date For Woocommerce +1

NVD WPScan

CVE-2025-2929

EPSS 0% CVSS 7.1

HIGH POC This Week

WordPress XSS Order Delivery Date For Woocommerce +1

NVD WPScan