PT-2025-52744 · Unknown+1 · Woocommerce+1

Published 2025-12-23 · Updated 2025-12-23 · CVE-2023-52210

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Product Delivery Date for WooCommerce – Lite versions through 2.7.0

Description A security issue exists in Tyche softwares Product Delivery Date for WooCommerce – Lite. The description does not provide specific details about the nature of the issue or any technical details regarding exploitation, such as API endpoints or vulnerable parameters. No information is available regarding the number of potentially affected devices or any real-world incidents where this issue was exploited.

Recommendations Update Product Delivery Date for WooCommerce – Lite to a version newer than 2.7.0.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-52210

Affected Products

The Product Delivery Date For Woocommerce – Lite

Woocommerce

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-52210 · Security Note
• https://t.me/cveNotify/146643 · Telegram Post
• https://vdp.patchstack.com/database/wordpress/plugin/product-delivery-date-for-woocommerce-lite/vulnerability/wordpress-product-delivery-date-for-woocommerce-lite-plugin-2-7-0-broken-access-control-vulnerability?_s_id=cve · Note