Lucene search
+L

125 matches found

Patchstack
Patchstack
added 2023/07/18 12:0 a.m.7 views

WordPress Printus - Cloud Printing Plugin for WooCommerce - Print WooCommerce PDF Invoices, Orders, Packaging Slips & More Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Printus - Cloud Printing Plugin for WooCommerce - Print WooCommerce PDF Invoices, Orders, Packaging Slips & More Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severit...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2023/03/01 3:15 p.m.31 views

CVE-2022-47148

Cross-Site Request Forgery CSRF vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin = 3.2.5 leading to popup dismiss...

4.3CVSS4.7AI score0.00231EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/01 3:15 p.m.7 views

CVE-2022-47148

Cross-Site Request Forgery CSRF vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin = 3.2.5 leading to popup dismiss...

4.3CVSS5.8AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/01 2:25 p.m.53 views

CVE-2022-47148

The CVE-2022-47148 describes a CSRF vulnerability in the WordPress plugin WP Overnight PDF Invoices & Packing Slips for WooCommerce , affected versions being ≤ 3.2.5. The issue allows a CSRF attack that can result in a popup dismissal, with exploitation possible by an unauthenticated user and use...

4.3CVSS4.7AI score0.00231EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/01 12:0 a.m.8 views

WordPress plugin PDF Invoices & Packing Slips for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. WordPress plugin is an application plug-in. A security vulnerability exists in th...

4.3CVSS5AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/01 12:0 a.m.10 views

PT-2023-15194 · WordPress · Wp Overnight Pdf Invoices & Packing Slips

Name of the Vulnerable Software and Affected Versions: WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin version 3.2.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which can lead to a popup dismiss. This type of vulnerability allows an...

4.3CVSS4.4AI score0.00231EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2023/01/27 12:0 a.m.17 views

WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce PDF Invoices & Packing Slips Type Plugin Vulnerable versions = 3.2.5 Fixed in 3.2.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47148 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 00a0d1fb8074...

4.3CVSS6.7AI score0.00231EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2022/10/05 12:0 a.m.10 views

WordPress WooCommerce PDF Invoices & Packing Slips Plugin < 2.16.0 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

6.1CVSS6.4AI score0.00779EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2022/10/04 12:0 a.m.21 views

WordPress WooCommerce PDF Invoices & Packing Slips Plugin < 2.10.5 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

4.8CVSS5.5AI score0.01188EPSS
SaveExploits3References1
OpenVAS
OpenVAS
added 2022/10/04 12:0 a.m.17 views

WordPress WooCommerce PDF Invoices & Packing Slips Plugin 2.14.x < 3.0.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpovernight:woocommercepdfinvoices%26packingslips";...

5.3AI score
SaveExploits0References1
NVD
NVD
added 2022/08/29 6:15 p.m.42 views

CVE-2022-2537

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting...

6.1CVSS0.00569EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/08/29 6:15 p.m.5 views

CVE-2022-2537

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting...

6.1CVSS6.3AI score0.00569EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2022/08/29 5:15 p.m.45 views

CVE-2022-2537 WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting...

6.3AI score0.00569EPSS
SaveExploits2References1
CVE
CVE
added 2022/08/29 5:15 p.m.120 views

CVE-2022-2537

The CVE-2022-2537 issue affects the WordPress plugin WooCommerce PDF Invoices & Packing Slips prior to version 3.0.1. The vulnerability is Reflected Cross-Site Scripting (XSS) caused by not sanitising and escaping certain parameters before outputting them back into an admin page attribute. Affect...

6.1CVSS6.1AI score0.00569EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2022/08/29 12:0 a.m.11 views

WordPress plugin WooCommerce PDF Invoices & Packing Slips 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL server set up a personal blog site. WordPress plugin is an application plug-in. A cross-site scripting vulnerability...

6.1CVSS6.1AI score0.00569EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2022/08/03 12:0 a.m.40 views

WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 3.0.0 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress WooCommerce PDF Invoices & Packing Slips plugin versions = 3.0.0. Solution Update the WordPress WooCommerce PDF Invoices & Packing Slips plugin to the latest available version at least 3.0.1...

6.1CVSS3.2AI score0.00569EPSS
SaveExploits2References1Affected Software1
wpexploit
wpexploit
added 2022/08/03 12:0 a.m.148 views

WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting. This is a re-introduction of CVE-2021-24991 in 2.14.0...

6.1CVSS1.5AI score0.01188EPSS
SaveExploits4
WPVulnDB
WPVulnDB
added 2022/08/03 12:0 a.m.20 views

WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting. This is a re-introduction of CVE-2021-24991 in 2.14.0 PoC...

6.1CVSS0.5AI score0.01188EPSS
SaveExploits4Affected Software1
OSV
OSV
added 2022/07/11 1:15 p.m.6 views

CVE-2022-2092

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks...

6.1CVSS5.7AI score0.00779EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/07/11 12:57 p.m.24 views

CVE-2022-2092 WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks...

6.2AI score0.00779EPSS
SaveExploits2References1
Rows per page
Query Builder