Vulnerabilities

TI-2024-19976 CVE-2024-30230 · GHSA-3vqf-26wq-v77m

WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability

LOW 39

Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue affects PDF Invoices and Packing Slips For WooCommerce: from n/a through 1.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00551 Published 2024-03-28 No fix listed CWE-502

TI-2024-01650 CVE-2024-1773 · GHSA-793f-wh5w-hhh4

PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection

MEDIUM 42

The PDF Invoices and Packing Slips For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.7 via deserialization of untrusted input via the order_id parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00967 Published 2024-03-07 No fix listed CWE-502

Vulnerabilities

Filters

WordPress PDF Invoices and Packing Slips For WooCommerce plugin <= 1.3.7 - PHP Object Injection vulnerability

PDF Invoices and Packing Slips For WooCommerce <= 1.3.7 - Authenticated (Subscriber+) PHP Object Injection