The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 3.8.0 due to insufficient input sanitization and…
woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce orders.
CVSS 4.0MEDIUM 6.3·Network·No auth·No interaction·EPSS 0.0045·Published 2025-02-04·Fixed in 4.0.0CWE-200
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooComme…
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.8.0 via the transform() function.
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00814·Published 2022-07-11·Fixed in 2.16.0CWE-79
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scrip…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00681·Published 2022-08-29·Fixed in 3.0.1CWE-79
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the adm…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.01207·Published 2022-01-03·Fixed in 2.10.5CWE-79