Lucene search
K

115 matches found

Cvelist
Cvelist
added 2026/02/18 5:29 a.m.25 views

CVE-2026-1906 PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.0 via the wpoipsedisaveordercustomerpeppolidentifiers AJAX action due to missing capability checks and order ownership validation. This...

4.3CVSS0.00013EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 9:26 a.m.4 views

CVE-2023-4161

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the SaveCustomField function in versions up to, and including, 1.2.90. This makes it possible for unauthenticated attackers to create invoice fields provided they can tric...

4.3CVSS6.7AI score0.00192EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:25 a.m.4 views

CVE-2023-4245

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to, and including, 1.2.89. This makes it possible for subscribers to view arbitrary invoices provided they can guess the...

4.3CVSS5.4AI score0.00215EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:33 a.m.3 views

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

7.1CVSS6.9AI score0.00299EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/10 2:22 p.m.1 views

CVE-2025-67589

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS7AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.1 views

EUVD-2025-202064

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS6.5AI score0.00036EPSS
Exploits0References2
CVE
CVE
added 2025/12/09 2:14 p.m.9 views

CVE-2025-67589

CVE-2025-67589 affects the WordPress plugin “WooCommerce PDF Invoices & Packing Slips” (woocommerce-pdf-invoices-packing-slips), with vulnerability type Missing/Broken Authorization (broken access control). Affected versions are up to 4.9.1; the issue is caused by incorrectly configured access co...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 2:14 p.m.1 views

CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.1 views

PT-2025-49963

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips versions through 4.9.1 Description The software contains a flaw related to incorrectly configured access control security levels, allowing unauthorized access. The issue impacts the WooCommerce PDF...

4.3CVSS6.5AI score0.00036EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/12/07 4:0 a.m.2 views

WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 4.9.1...

4.3CVSS7AI score0.00036EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/14 10:11 a.m.4 views

CVE-2025-64269

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS7AI score0.00034EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.2 views

PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...

6.6AI score0.00034EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.3 views

WordPress plugin WooCommerce PDF Invoice Builder 安全漏洞

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

4.3CVSS6.4AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-38155

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00297EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-52503

Malicious code in bioql PyPI...

9.8CVSS8.9AI score0.07084EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-53063

Malicious code in bioql PyPI...

7.1CVSS8.6AI score0.00153EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-34382

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.0021EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-59255

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00257EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-56199

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00051EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-38157

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00299EPSS
Exploits0References1
Rows per page
Query Builder