WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset vulnerability

🗓️ 08 Apr 2024 05:00:27Reported by Krzysztof ZającType

Unauthenticated settings reset vulnerability in WordPress plugin WooCommerce PDF Invoices and Shipping Labels <=4.4.2; discovered by Krzysztof Zając.

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress Plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 安全漏洞	6 Apr 202400:00	–	cnnvd
CVE	CVE-2024-3216	6 Apr 202403:24	–	cve
Cvelist	CVE-2024-3216 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset	6 Apr 202403:24	–	cvelist
EUVD	EUVD-2024-31808	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3216	6 Apr 202404:15	–	nvd
Patchstack	WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin <= 4.4.2 is vulnerable to Broken Access Control	8 Apr 202400:00	–	patchstack
RedhatCVE	CVE-2024-3216	23 May 202510:09	–	redhatcve
Vulnrichment	CVE-2024-3216 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset	6 Apr 202403:24	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 1, 2024 to April 7, 2024)	11 Apr 202417:23	–	wordfence
WPVulnDB	WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels < 4.4.3 - Missing Authorization to Unauthenticated Settings Reset	5 Apr 202400:00	–	wpvulndb

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/print-invoices-packing-slip-labels-for-woocommerce/woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-442-missing-authorization-to-unauthenticated-settings-res

08 Apr 2024 05:00Current

7High risk

Vulners AI Score7

CVSS 3.15.3

EPSS0.00363

SSVC