Review reviewCritical
CVE-2026-42386
tychesoftwares Order Delivery Date for WooCommerce
Unauthenticated SQL Injection in Order Delivery Date for WooCommerce <= 4.5.1 versions.
- CVSS
- 9.3
- EPSS
- 0.28% 20.5% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.16