Cyber Resilience

CVE-2025-2942

Tychesoftwares Order Delivery Date For Woocommerce ≤ 12.6.0

Public PoC
Published
11 July 2025
Modified
17 June 2026
CVSS Score v3.1 4.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score 0.0026 17th percentile
Risk Priority 36 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2025-2942 is a medium-severity an unspecified weakness vulnerability in Tychesoftwares Order Delivery Date For Woocommerce. Its CVSS base score is 4.3 (Medium).

Operationally, ranked at the 17th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

The Order Delivery Date WordPress plugin before 12.6.0 discloses arbitrary post title (such as from draft and private posts) via an unauthenticated AJAX action, allowing attackers to retrieve such information

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-2929Same product: Tychesoftwares Order Delivery Date For Woocommerce
CVE-2023-41874Same product: Tychesoftwares Order Delivery Date For Woocommerce
CVE-2023-41858Same product: Tychesoftwares Order Delivery Date For Woocommerce
CVE-2024-13359Same product class: WordPress / CMS plugin
CVE-2023-0479Same product class: WordPress / CMS plugin
CVE-2023-44986Same product class: WordPress / CMS plugin
CVE-2025-2907Same product class: WordPress / CMS plugin
CVE-2023-2986Same product class: WordPress / CMS plugin
CVE-2024-9345Same product class: WordPress / CMS plugin
CVE-2024-10857Same product class: WordPress / CMS plugin

Affected Assets

tychesoftwares
order delivery date for woocommerce
≤ 12.6.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References