What’s Vulnerable › Products
wpovernight PDF Invoices & Packing Slips for WooCommerce vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your wpovernight PDF Invoices & Packing Slips for WooCommerce version is affected
Latest wpovernight PDF Invoices & Packing Slips for WooCommerce vulnerabilities
- CVE-2026-109217 — PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache (CVSS 5.3)
- CVE-2026-107750 — PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout (CVSS 7.2)
- CVE-2026-92244 — PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields (CVSS 7.2)
- CVE-2026-13116 — PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute (CVSS 4.3)
- CVE-2026-1906 — PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification (CVSS 4.3)
- CVE-2025-24373 — Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips (CVSS 6.5)
- CVE-2024-50421 — WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2024-3047 — PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery (CVSS 7.2)
- CVE-2024-3045 — PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2024-22147 — WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.7.5 is vulnerable to SQL Injection (CVSS 7.2)
- CVE-2022-47148 — WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- CVE-2022-2537 — WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2022-2092 — WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-24991 — WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting (CVSS 4.8)
- CVE-2017-18506 — (CVSS 6.1)