WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Parameter
A vulnerability in WebToffee WooCommerce PDF Invoices through 5.0.2 allows unauthenticated attackers to view sensitive customer order documents if guest access is enabled and order details are known.