Conoce las vulnerabilidades. Protege tus aplicaciones.

Alta 09.10.2026

CVE-2026-93746

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Referencia directa insegura a objetos en el acceso a documentos de pedidos mediante el parámetro 'email'

Una vulnerabilidad IDOR en WebToffee WooCommerce PDF Invoices hasta la versión 5.0.2 permite a atacantes no autenticados acceder a documentos de pedidos si el acceso de invitados está habilitado.

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 22.08.2026

CVE-2026-18027

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 03.06.2026

CVE-2026-49056

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.4 - Unauthenticated Information Exposure

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 24.01.2025

CVE-2025-24644

WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.7.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 05.04.2024

CVE-2024-3216

WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 26.03.2024

CVE-2024-22288

WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.0 - Reflected Cross-Site Scripting

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 21.03.2024

CVE-2024-0957

WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Media 02.01.2024

CVE-2023-7068

WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export

WordPress

print-invoices-packing-slip-labels-for-woocommerce

Alta 27.12.2023

CVE-2023-51546

WooCommerce PDF Invoices <= 4.2.1 - Authenticated(Shop Manager+) Arbitrary Options Update via JSON Import

WordPress

print-invoices-packing-slip-labels-for-woocommerce