WordPress Flexible PDF Invoices for WooCommerce & WordPress Plugin <= 6.0.13 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by theviper17 in WordPress Plugin Flexible PDF Invoices for WooCommerce & WordPress versions = 6.0.13...

CVE-2025-57977

CVE-2025-57977 is a CSRF vulnerability in the WordPress plugin Flexible PDF Invoices for WooCommerce & WordPress (≤ 6.0.13). Affected component is the plugin’s CSRF handling in the invoice generation/related actions. CVSS metrics from Patchstack/NVD indicate: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H w...