Delivery Date Time & Pickup for WooCommerce

Delivery Date Time & Pickup for WooCommerce has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (25%). Other recurring categories include Generation Of Error Message Containing Sensitive Information, Insufficient Verification Of Data Authenticity.

Every one of the 4 issues recorded for Delivery Date Time & Pickup for WooCommerce has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Delivery Date Time & Pickup for WooCommerce is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

01234567891015.07.2016Today03.10.20236.1WooODT Lite <= 2.4.6 - Reflected Cross-Site Scripting CVSS 6.1 · 03.10.202331.10.20238.8WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update CVSS 8.8 · 31.10.202317.02.20255.3WooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure CVSS 5.3 · 17.02.202511.02.20265.3WooODT Lite <= 2.5.5 - Unauthenticated Payment Bypass CVSS 5.3 · 11.02.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Delivery Date Time & Pickup for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2023-47179

WooODT Lite <= 2.4.6 - Missing Authorization to Arbitrary Options Update

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports
Plugin Profile
Latestv2.5.7

Delivery Date Time & Pickup for WooCommerce

mdalabar

Author

mdalabar

4.2(112)
84/100
Last Updated
2026-06-23 (3mo ago)
Active Installs
400+
Downloads
108,986
Requires WP
3.5+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2016-07-15 (10y ago)

WooODT Lite is a WooCommerce Delivery & Pickup Date Time extension that gives the facility of selecting delivery/pickup date and time/time slot on checkout page. WooODT Lite lets your customers choose order type as deliverable or self pickup along with their desired date and preferred time slot, optionally offering pickup location selection when you have multiple pickup points. It comes with a widget and shortcode [ByConsole_WooODT] that you can place on any page/sidebar/template to collect desired delivery/pickup date time and pickup location before checkout. Support Ask us anytime by initiating a chat on our website: https://plugins.byconsole.com OR Email: support@byconsole.com OR Create a ticket on our dedicated support forum: https://support.byconsole.com

View on WordPress.org

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C