Threats tagged 'ghsa-76fm-xcxx-qqvj'

CVE-2026-65559 is a high-severity vulnerability in the Order Delivery Date for WooCommerce plugin by tychesoftwares. It affects versions up to and including 4.6.0 and involves incorrect privilege assignment that allows shop managers to escalate their privileges. The vulnerability has a CVSS score of 7.2, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor.