PT-2025-10412

Name of the Vulnerable Software and Affected Versions Print Invoice & Delivery Notes for WooCommerce plugin for WordPress versions up to and including 5.4.1 Description The issue allows unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/wcdn/invoice...

CVE-2024-13640: Exposure of Sensitive Information to an Unauthorized Actor

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in...