PT-2025-31948 · Unknown · Agenzia Impresa Eccobook

Name of the Vulnerable Software and Affected Versions: Agenzia Impresa Eccobook versions prior to 2.81.2 Description: An Insecure Direct Object Reference IDOR vulnerability exists in the PdfHandler component. This allows unauthenticated attackers to read confidential documents. The vulnerability ...

CVE-2025-24373

woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce orders. This vulnerability allows unauthorized users to access any PDF document from a store if they: 1. Have access to a guest document li...