What’s Vulnerable › Vulnerabilities

CVE-2023-51546: WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17
• Weakness: CWE-269

Description

Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.

Affected products

• WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels: before 4.3.0 — fixed in 4.3.0

How to fix

Upgrade to a fixed version: WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels 4.3.0. Check the vendor advisory for mitigations.

References

• https://patchstack.com/database/vulnerability/print-invoices-packing-slip-labels-for-woocommerce/wordpress-woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-plugin-4-2-1-privilege-escalation-vulnerability?_s_id=cve
• https://patchstack.com/database/vulnerability/print-invoices-packing-slip-labels-for-woocommerce/wordpress-woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-plugin-4-2-1-privilege-escalation-vulnerability?_s_id=cve

Get alerted when CVE-2023-51546 or the next vulnerability affects your stack