Lucene search
+L

171 matches found

Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•35 views

PT-2026-49499

Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels = 4.9.4 versions...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/18 5:29 a.m.•51 views

CVE-2026-1906 PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.0 via the wpoipsedisaveordercustomerpeppolidentifiers AJAX action due to missing capability checks and order ownership validation. This...

4.3CVSS0.00275EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/09 9:26 a.m.•21 views

CVE-2023-4161

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the SaveCustomField function in versions up to, and including, 1.2.90. This makes it possible for unauthenticated attackers to create invoice fields provided they can tric...

4.3CVSS6.7AI score0.00311EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:25 a.m.•19 views

CVE-2023-4245

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to, and including, 1.2.89. This makes it possible for subscribers to view arbitrary invoices provided they can guess the...

4.3CVSS5.4AI score0.00539EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:33 a.m.•14 views

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

7.1CVSS6.9AI score0.00308EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/10 2:22 p.m.•18 views

CVE-2025-67589

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS7AI score0.00225EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/09 6:30 p.m.•16 views

EUVD-2025-202064

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS6.5AI score0.00225EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/09 2:14 p.m.•27 views

CVE-2025-67589

CVE-2025-67589 affects the WordPress plugin “WooCommerce PDF Invoices & Packing Slips” (woocommerce-pdf-invoices-packing-slips), with vulnerability type Missing/Broken Authorization (broken access control). Affected versions are up to 4.9.1; the issue is caused by incorrectly configured access co...

4.3CVSS6AI score0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:14 p.m.•7 views

CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS6AI score0.00225EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-67589: Missing Authorization

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS5.9AI score0.00225EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•25 views

PT-2025-49963

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips versions through 4.9.1 Description The software contains a flaw related to incorrectly configured access control security levels, allowing unauthorized access. The issue impacts the WooCommerce PDF...

4.3CVSS6.5AI score0.00225EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2025/12/07 4:00 a.m.•11 views

WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 4.9.1...

4.3CVSS7AI score0.00225EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/14 10:11 a.m.•28 views

CVE-2025-64269

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS7AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/13 12:00 a.m.•20 views

WordPress plugin WooCommerce PDF Invoice Builder 安全漏洞

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

4.3CVSS6.4AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/13 12:00 a.m.•20 views

PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...

4.3CVSS6.6AI score0.00192EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/13 12:00 a.m.•5 views

CVE-2025-64269: Missing Authorization

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

4.3CVSS5.9AI score0.00192EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-56199

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00221EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-52503

Malicious code in bioql PyPI...

9.8CVSS8.9AI score0.01167EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-38156

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00496EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-59255

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00383EPSS
SaveExploits0References2
Rows per page
Query Builder