Lucene search
+L

83 matches found

Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•21 views

PT-2025-24202 · Woocommerce · Print Invoice & Delivery Notes For Woocommerce

Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce versions 5.5.0 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed. This can lead to security breaches where an attacker can trick a user...

5.4CVSS5.5AI score0.00154EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•8 views

CVE-2025-49239: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through = 5.5.0...

5.4CVSS5.8AI score0.00154EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•13 views

WordPress plugin “Print Invoice & Delivery Notes for WooCommerce” has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS5.8AI score0.00154EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:34 a.m.•20 views

CVE-2024-4233

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...

4.3CVSS5.8AI score0.00343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:29 p.m.•25 views

CVE-2021-3380

Insecure direct object reference IDOR vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality...

6.5CVSS6.4AI score0.0113EPSS
SaveExploits1References1
NVD
NVD
•added 2025/03/08 5:15 a.m.•20 views

CVE-2024-13640

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in...

5.9CVSS0.00537EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/08 4:21 a.m.•6 views

CVE-2024-13640 Print Invoice & Delivery Notes for WooCommerce <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in...

5.9CVSS8.3AI score0.00537EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/03/08 3:05 a.m.•20 views

WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.4.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 5.4.1...

5.9CVSS8.4AI score0.00537EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/03/08 12:00 a.m.•16 views

WordPress plugin “Print Invoice & Delivery Notes for WooCommerce” has a vulnerability related to information leakage.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

5.9CVSS8.3AI score0.00537EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/08 12:00 a.m.•8 views

CVE-2024-13640: Exposure of Sensitive Information to an Unauthorized Actor

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in...

5.9CVSS8.4AI score0.00537EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/08 12:00 a.m.•9 views

PT-2025-10412

Name of the Vulnerable Software and Affected Versions Print Invoice & Delivery Notes for WooCommerce plugin for WordPress versions up to and including 5.4.1 Description The issue allows unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/wcdn/invoice...

5.9CVSS8.2AI score0.00537EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/12/24 12:00 a.m.•18 views

WordPress plugin “Print Invoice & Delivery Notes for WooCommerce” has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

4.3CVSS7.7AI score0.0028EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/24 12:00 a.m.•11 views

CVE-2024-12210: Missing Authorization

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdnremoveshoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, wit...

4.3CVSS5.7AI score0.0028EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/24 12:00 a.m.•16 views

PT-2024-17487 · WordPress · Print Invoice & Delivery Notes For Woocommerce

Name of the Vulnerable Software and Affected Versions: Print Invoice & Delivery Notes for WooCommerce plugin for WordPress versions up to, and including, 5.4.0 Description: The issue is due to a missing capability check on the wcdn remove shoplogo AJAX action. This makes it possible for...

4.3CVSS9.3AI score0.0028EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2024/12/23 5:45 p.m.•17 views

WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.4.0 - Missing Authorization to Authenticated (Subscriber+) Logo Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Logo Deletion vulnerability discovered by Tieu Pham Trong Nhan in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 5.4.0...

4.3CVSS7AI score0.0028EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2024/12/13 3:15 p.m.•18 views

CVE-2022-46795

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2...

6.5CVSS5.8AI score0.00605EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:22 p.m.•70 views

CVE-2022-46795

Summary of CVE-2022-46795 (Print Invoice & Delivery Notes for WooCommerce) Issue: A Missing Authorization vulnerability allows exploitation of misconfigured access control in the WordPress plugin Print Invoice & Delivery Notes for WooCommerce (versions &lt;= 4.7.2). Root cause: Inadequate authori...

6.5CVSS8AI score0.00605EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•7 views

CVE-2022-46795: Missing Authorization

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2...

6.5CVSS7.9AI score0.00605EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/08 2:15 p.m.•50 views

CVE-2024-4233

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...

4.3CVSS4.7AI score0.00343EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/05/08 1:19 p.m.•19 views

CVE-2024-4233 Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares

Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce, Tyche Softwares Arconix Shortcodes, Tyche Softwares Arconix FAQ.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.8.1; Arconix Shortcodes: from n/a through...

4.3CVSS7AI score0.00343EPSS
SaveExploits0References3
Rows per page
Query Builder