CVE-2024-39650

CVE-2024-39650 affects the WooCommerce PDF Vouchers plugin (WordPress) up to version 4.9.4, where a Missing Authorization vulnerability allows unauthenticated users to access admin-level functionality not constrained by ACLs. This could enable unauthorized actions on the plugin (e.g., administrat...

CVE-2024-56265

CVE-2024-56265 affects the WordPress plugin WooCommerce PDF Vouchers, specifically versions prior to 4.9.9. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by improper neutralization in the web page generation process. Impact is primarily client-side script execution in af...

CVE-2024-39651

CVE-2024-39651 affects the WooCommerce PDF Vouchers WordPress plugin (versions before 4.9.5). It allows unauthenticated Arbitrary File Deletion due to a path traversal flaw. Patch: upgrade to 4.9.5 or later. CVSS reported: high, with network attack feasibility and no user interaction necessary. R...

CVE-2024-39652

CVE-2024-39652 concerns WooCommerce PDF Vouchers (WPWooCommerce PDF Vouchers plugin). A Reflected Cross-Site Scripting (XSS) vulnerability exists in versions prior to 4.9.5, enabling an attacker to inject or reflect script via input during web page generation. Public sources (NVD, Patchstack, Red...

CVE-2024-54383

CVE-2024-54383 describes an unauthenticated privilege escalation in the plugin WooCommerce PDF Vouchers for WordPress/WooCommerce, caused by an Incorrect Privilege Assignment flaw. The vulnerability affects the plugin’s vulnerable releases up to version prior to 4.9.9 and is rated as CRITICAL (CV...