6 matches found
CVE-2025-24373
woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce orders. This vulnerability allows unauthorized users to access any PDF document from a store if they: 1. Have access to a guest document li...
CVE-2025-24373
woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce orders. This vulnerability allows unauthorized users to access any PDF document from a store if they: 1. Have access to a guest document li...
CVE-2025-24373
creationtimestamp| type| source ---|---|--- 2025-02-04 18:51:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113947120626335280 2025-02-04 19:16:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lherfplhtl2c 2025-02-04 22:15:20+00:00| seen|...
CVE-2025-24373 Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips
woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce orders. This vulnerability allows unauthorized users to access any PDF document from a store if they: 1. Have access to a guest document li...
CVE-2025-24373 Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips
woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce orders. This vulnerability allows unauthorized users to access any PDF document from a store if they: 1. Have access to a guest document li...
CVE-2025-24373
The CVE concerns the WooCommerce extension woocommerce-pdf-invoices-packing-slips. Affected software: the WordPress plugin for generating PDFs of invoices/packing slips (pre-4.0.0 versions). Root cause: unauthorized users can access any PDF document by manipulating the guest-access flow—after obt...