Delivery Date Time & Pickup for WooCommerce

Delivery Date Time & Pickup for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (25%). Other recurring categories include Generation Of Error Message Containing Sensitive Information, Insufficient Verification Of Data Authenticity.

Every one of the 4 issues recorded for Delivery Date Time & Pickup for WooCommerce has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each.

01234567891003.10.2023Today03.10.20236.1WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting CVSS 6.1 · 03.10.202331.10.20238.8WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update CVSS 8.8 · 31.10.202317.02.20255.3WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure CVSS 5.3 · 17.02.202511.02.20265.3WooODT Lite <= 2.5.5 - Unauthenticated Payment Bypass CVSS 5.3 · 11.02.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Delivery Date Time & Pickup for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2023-47179

WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C