CodeRockz vulnerabilities and threats

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.5	CVE-2026-124256Delivery & Pickup Date Time for WooCommerce (WordPress plugin) · Cross-site Scripting Medium6.52026-11-11CVE Database V5CVE-2026-124256 CVE-2026-124256 is a stored cross-site scripting (XSS) vulnerability in the CodeRockz Delivery & Pickup Date Time for WooCommerce plugin. It affects versions from initial releases up to 1.3.90. The vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. A fix is available in version 1.3.91. Vulnerability CodeRockz	CVE Database V5	2026-11-11

Page 1 of 1