# Tyche Softwares vulnerabilities Source: https://junglewise.ai/threats/vendors/tyche-softwares Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/tyche-softwares.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 9 vulnerabilities in Tyche Softwares: 0 in the last 7 days and 2 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-102251, was published on 14 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 2 - All time: 9 (1 critical, 0 exploited in the wild) ## About Tyche Softwares A software company specializing in the development of plugins and extensions for WooCommerce and WordPress. ## Latest Tyche Softwares vulnerabilities - [CVE-2026-102251: Abandoned Cart Pro for WooCommerce SQL injection in validate parameter](https://junglewise.ai/threats/cve-2026-102251-the-abandoned-cart-pro-for-woocommerce-plugin-for-wordpress-is) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-81543: Abandoned Cart Pro for WooCommerce privilege escalation via missing AJAX capability checks](https://junglewise.ai/threats/cve-2026-81543-abandoned-cart-pro-for-woocommerce-privilege-escalation-via) (high, CVSS 8.8, published 5 Sep 2026) - [CVE-2026-65557: Tychesoftwares Abandoned Cart Lite for WooCommerce XSS](https://junglewise.ai/threats/cve-2026-65557-tychesoftwares-abandoned-cart-lite-for-woocommerce-xss) (medium, CVSS 5.9, published 27 Jul 2026) - [CVE-2026-12585: Tyche Softwares Abandoned Cart Lite for WooCommerce auth bypass](https://junglewise.ai/threats/cve-2026-12585-tyche-softwares-abandoned-cart-lite-for-woocommerce-auth-bypass) (info, CVSS 8.1, published 16 Jul 2026) - [CVE-2026-57637: Tyche Softwares Abandoned Cart Lite for WooCommerce CSRF](https://junglewise.ai/threats/cve-2026-57637-tyche-softwares-abandoned-cart-lite-for-woocommerce-csrf) (medium, CVSS 4.3, published 26 Jun 2026) - [CVE-2026-56060: Tyche Softwares Print Invoice & Delivery Notes for WooCommerce data exposure](https://junglewise.ai/threats/cve-2026-56060-tyche-softwares-print-invoice-delivery-notes-for-woocommerce-data) (high, CVSS 7.5, published 26 Jun 2026) - [CVE-2026-56048: Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce IDOR](https://junglewise.ai/threats/cve-2026-56048-tyche-softwares-payment-gateway-based-fees-and-discounts-for) (medium, CVSS 6.5, published 26 Jun 2026) - [CVE-2026-56010: Tyche Softwares Abandoned Cart Pro for WooCommerce privilege escalation](https://junglewise.ai/threats/cve-2026-56010-tyche-softwares-abandoned-cart-pro-for-woocommerce-privilege) (high, CVSS 8.8, published 26 Jun 2026) - [CVE-2026-42386: Tyche Softwares Order Delivery Date for WooCommerce SQL injection](https://junglewise.ai/threats/cve-2026-42386-tyche-softwares-order-delivery-date-for-woocommerce-sql-injection) (critical, CVSS 9.3, published 15 Jun 2026) ## Most severe Tyche Softwares vulnerabilities - [CVE-2026-42386: Tyche Softwares Order Delivery Date for WooCommerce SQL injection](https://junglewise.ai/threats/cve-2026-42386-tyche-softwares-order-delivery-date-for-woocommerce-sql-injection) (critical, CVSS 9.3, published 15 Jun 2026) - [CVE-2026-81543: Abandoned Cart Pro for WooCommerce privilege escalation via missing AJAX capability checks](https://junglewise.ai/threats/cve-2026-81543-abandoned-cart-pro-for-woocommerce-privilege-escalation-via) (high, CVSS 8.8, published 5 Sep 2026) - [CVE-2026-56010: Tyche Softwares Abandoned Cart Pro for WooCommerce privilege escalation](https://junglewise.ai/threats/cve-2026-56010-tyche-softwares-abandoned-cart-pro-for-woocommerce-privilege) (high, CVSS 8.8, published 26 Jun 2026) - [CVE-2026-102251: Abandoned Cart Pro for WooCommerce SQL injection in validate parameter](https://junglewise.ai/threats/cve-2026-102251-the-abandoned-cart-pro-for-woocommerce-plugin-for-wordpress-is) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-56060: Tyche Softwares Print Invoice & Delivery Notes for WooCommerce data exposure](https://junglewise.ai/threats/cve-2026-56060-tyche-softwares-print-invoice-delivery-notes-for-woocommerce-data) (high, CVSS 7.5, published 26 Jun 2026) - [CVE-2026-56048: Tyche Softwares Payment Gateway Based Fees and Discounts for WooCommerce IDOR](https://junglewise.ai/threats/cve-2026-56048-tyche-softwares-payment-gateway-based-fees-and-discounts-for) (medium, CVSS 6.5, published 26 Jun 2026) - [CVE-2026-65557: Tychesoftwares Abandoned Cart Lite for WooCommerce XSS](https://junglewise.ai/threats/cve-2026-65557-tychesoftwares-abandoned-cart-lite-for-woocommerce-xss) (medium, CVSS 5.9, published 27 Jul 2026) - [CVE-2026-57637: Tyche Softwares Abandoned Cart Lite for WooCommerce CSRF](https://junglewise.ai/threats/cve-2026-57637-tyche-softwares-abandoned-cart-lite-for-woocommerce-csrf) (medium, CVSS 4.3, published 26 Jun 2026) - [CVE-2026-12585: Tyche Softwares Abandoned Cart Lite for WooCommerce auth bypass](https://junglewise.ai/threats/cve-2026-12585-tyche-softwares-abandoned-cart-lite-for-woocommerce-auth-bypass) (info, CVSS 8.1, published 16 Jul 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 1 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Tyche Softwares technologies - [Tyche Softwares Abandoned Cart Lite for WooCommerce](https://junglewise.ai/threats/technologies/abandoned-cart-lite-for-woocommerce): 3 vulnerabilities - [Tyche Softwares Abandoned Cart Pro for WooCommerce](https://junglewise.ai/threats/technologies/abandoned-cart-pro-for-woocommerce): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Tyche Softwares vulnerabilities", https://junglewise.ai/threats/vendors/tyche-softwares, 9 November 2026.