Read the docs

wpovernight

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

wpovernight records in CISA KEV

No wpovernight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Woocommerce Pdf Invoices& Packing Slips · all components

Priority LOW 38

The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 3.8.0 due to insufficient input sanitization and…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0057 Published 2024-05-02 No fix listed CWE-79
Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooComme…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0058 Published 2024-01-26 No fix listed CWE-89
Priority LOW 29

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00814 Published 2022-07-11 Fixed in 2.16.0 CWE-79
Priority LOW 28

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scrip…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2022-08-29 Fixed in 3.0.1 CWE-79
Priority LOW 24

The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the adm…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01207 Published 2022-01-03 Fixed in 2.10.5 CWE-79
Open these records in search →