Order Delivery Date (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-07-11. Vendor: Unknown.

CVEs of Order Delivery Date

• CVE-2025-2942 - CVSS 4.3 (medium), 2025-07-11: The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX…
• CVE-2025-2929 - CVSS 7.1 (high), 2025-05-20: The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2025-2907 - CVSS 9.8 (critical), 2025-04-26: The Order Delivery Date WordPress plugin before 12.3.1 does not have authorization and CSRF checks when importing settings. Furthermore it also lacks proper…