CVE-2026-124256mediumCWE-79

CVE-2026-124256: medium-severity vulnerability in CodeRockz Delivery & Pickup Date Time for…

WordPress Delivery & Pickup Date Time for WooCommerce plugin <= 1.3.90 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor Delivery &amp; Pickup Date Time for WooCommerce

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRockz Delivery &amp; Pickup Date Time for WooCommerce woo-delivery allows Stored XSS.This issue affects Delivery &amp; Pickup Date Time for WooCommerce: from n/a through 1.3.90.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
CodeRockz · Delivery &amp; Pickup Date Time for WooCommerce