CVE-2023-52210 MEDIUM

CVE-2023-52210: WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.0 - Broken Access Control vulnerability

Vendor Tyche Softwares
Product Product Delivery Date for WooCommerce – Lite
Published December 23, 2025
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Vulnerability in Tyche softwares Product Delivery Date for WooCommerce – Lite.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.0.

Explanation of Vulnerability in Simple Terms

02Summary

Product Delivery Date for WooCommerce – Lite versions up to 2.7.0 contain a vulnerability that allows an attacker to disrupt site availability. The vulnerability requires no authentication or user interaction and can be triggered remotely. Site administrators should update to a version newer than 2.7.0 to resolve this issue.

What an attacker can do

03Attacker Capabilities

Disrupt the availability of the WooCommerce site or cause service degradation.

Potential impact on your site

04Site Impact

Your WooCommerce store may experience downtime or performance issues without warning.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

December 23, 2025 CVE published
April 28, 2026 Record updated