Advisories · Technology
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels.
Every CVE that names WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Param…
- WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
- Broken access control
- CVSS 6.5 Medium
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter
- WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
- Path traversal
- CVSS 5.3 Medium
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset
- WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
- Broken access control
- CVSS 6.1 Medium
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting
- WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export
- WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
- Broken access control