<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: webtoffee-woocommerce-pdf-invoices-packing-slips-delivery-notes-shipping-labels</title><description>Every new CVE for webtoffee-woocommerce-pdf-invoices-packing-slips-delivery-notes-shipping-labels.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93746: WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes &amp; Shipping Labels &lt;= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via &apos;email&apos; Param…</title><link>https://agentprime.io/advisories/CVE-2026-93746/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93746/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 10 Oct 2026 07:41:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18027: WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes &amp; Shipping Labels &lt;= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via &apos;customer_note&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-18027/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18027/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 22 Aug 2026 23:27:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3216: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels &lt;= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset</title><link>https://agentprime.io/advisories/CVE-2024-3216/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3216/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 Apr 2024 03:24:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0957: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels &lt;= 4.4.1 - Unauthenticated Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-0957/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0957/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Mar 2024 02:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-7068: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels &lt;= 4.3.0 - Missing Authorization to Order Export</title><link>https://agentprime.io/advisories/CVE-2023-7068/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-7068/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Jan 2024 08:29:48 GMT</pubDate><category>CVE</category></item></channel></rss>