Advisories · Technology
wpovernight PDF Invoices & Packing Slips for WooCommerce.
Every CVE that names wpovernight PDF Invoices & Packing Slips for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- CWE-524
- CVSS 7.2 High
PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- Cross-site scripting (XSS)
- CVSS 7.2 High
PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- Broken access control
- CVSS 4.3 Medium
PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- Broken access control
- CVSS 7.2 High
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- Cross-site scripting (XSS)
- CVSS 7.2 High
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
- wpovernight PDF Invoices & Packing Slips for WooCommerce
- Server-side request forgery (SSRF)