PT-2024-34195 · Wp Overnight · Woocommerce Pdf Invoices & Packing Slips

Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices & Packing Slips versions 3.8.6 and earlier Description: The issue is related to a Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips, which allows exploiting incorrectly...

WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 3.8.6...

CVE-2024-39651

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39651

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39651

CVE-2024-39651 affects the WooCommerce PDF Vouchers WordPress plugin (versions before 4.9.5). It allows unauthenticated Arbitrary File Deletion due to a path traversal flaw. Patch: upgrade to 4.9.5 or later. CVSS reported: high, with network attack feasibility and no user interaction necessary. R...

PT-2024-28589

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Vouchers versions prior to 4.9.5 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, which allows File Manipulation. This...

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5...

CVE-2024-39652

CVE-2024-39652 concerns WooCommerce PDF Vouchers (WPWooCommerce PDF Vouchers plugin). A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions prior to 4.9.5, enabling an attacker to inject or reflect script via input during web page generation. Public sources (NVD, Patchstack, Red...

WordPress WooCommerce PDF Vouchers plugin < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Dave Jong Patchstack in WordPress Plugin WooCommerce PDF Vouchers versions 4.9.5...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Arbitrary File Deletion

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2024-39651 Patch priority High CVSS severity High 8.6 Developer Claim ownership PSID 7c83b156fb00 Credits Dave Jong Patchsta...

WordPress WooCommerce PDF Vouchers Plugin < 4.9.5 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce PDF Vouchers Type Plugin Vulnerable versions 4.9.5 Fixed in 4.9.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-39652 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4bf7ebebf09d Credits Dave Jong Patchstack...

PT-2024-28590

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Vouchers versions prior to 4.9.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations Fo...

CVE-2023-51546

Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1...

CVE-2023-51546

Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1...

CVE-2023-51546 WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability

Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1...

PT-2024-14197 · Webtoffee · Woocommerce Pdf Invoices

Name of the Vulnerable Software and Affected Versions: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels versions 4.2.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation in WebToffee WooCommerce PDF Invoices,...

WordPress plugin WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Tim Coen in WordPress Plugin WooCommerce PDF Invoices & Packing Slips versions = 3.8.0...

WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.8.0 is vulnerable to Server Side Request Forgery (SSRF)

Software WooCommerce PDF Invoices & Packing Slips Type Plugin Vulnerable versions = 3.8.0 Fixed in 3.8.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-3047 Patch priority Medium CVSS severity Medium 7.2 Developer Claim ownership PSID 6d237d7ae9e9 Credits...