Extension WordPress
Vulnérabilités PDF Invoices & Packing Slips for WooCommerce
Cette page rassemble les failles publiées pour PDF Invoices & Packing Slips for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de PDF Invoices & Packing Slips for WooCommerce
14 fiches
PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 – Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generate_document_shortcode due to missing validation on a user controlled key.…
*-5.14.0
5.15.0
10/07/2026
PDF Invoices & Packing Slips for WooCommerce < 5.9.0 – Authenticated (Shop manager+) PHP Object Injection
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in versions up to 5.9.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with shop manager-level access…
[*, 5.9.0)
5.9.0
20/04/2026
PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 – Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.0 via the `wpo_ips_edi_save_order_customer_peppol_identifiers` AJAX action due to missing capability checks and order…
*-5.6.0
5.7.0
17/02/2026
WooCommerce PDF Invoices & Packing Slips <= 4.9.1 – Missing Authorization
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.9.1. This makes it possible for…
*-4.9.1
5.0.0
07/12/2025
WooCommerce PDF Invoices & Packing Slips <= 3.8.6 – Missing Authorization
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.8.6. This makes it possible for…
*-3.8.6
3.8.7
24/10/2024
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 – Unauthenticated Stored Cross-Site Scripting
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it…
*-3.8.0
3.8.1
24/04/2024
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 – Unauthenticated Server-Side Request Forgery
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.8.0 via the transform() function. This can allow unauthenticated attackers to make web requests to…
*-3.8.0
3.8.1
24/04/2024
PDF Invoices & Packing Slips for WooCommerce <= 3.7.6 – Authenticated (Shop Manager+) SQL Injection
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the get_numbers() function in all versions up to, and including, 3.7.6 due to insufficient escaping on the user supplied parameter and…
*-3.7.6
3.7.7
12/01/2024
WooCommerce PDF Invoices & Packing Slips <= 3.2.5 – Cross Site Request Forgery
The WooCommerce PDF Invoices & Packing Slips plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.5. This is due to missing or incorrect nonce validation on the attachment_settings_hint() function. This makes…
*-3.2.5
3.2.6
27/01/2023
WooCommerce PDF Invoices & Packing Slips 2.14.0 – 3.0.0 – Reflected Cross-Site Scripting
The WooCommerce PDF Invoices & Packing Slips plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions 2.14.0 up to 3.0.0 via its tabs and section parameters due to insufficient input sanitization and output escaping. This makes…
2.14.0-3.0.0
3.0.1
03/08/2022
WooCommerce PDF Invoices & Packing Slips <= 2.15.0 – Reflected Cross-Site Scripting
The WooCommerce PDF Invoices & Packing Slips plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'preview' parameter in versions up to, and including, 2.15.0 due to insufficient input sanitization and output escaping. This makes it…
*-2.15.0
2.16.0
16/06/2022
WooCommerce PDF Invoices & Packing Slips <= 2.14.5 – Cross-Site Scripting
The WooCommerce PDF Invoices & Packing Slips plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.14.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
2.14.5
2.15
07/06/2022
WooCommerce PDF Invoices & Packing Slips <= 2.10.4 – Reflected Cross-Site Scripting via tab and section parameter
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard
[*, 2.10.5)
2.10.5
06/12/2021
WooCommerce PDF Invoices & Packing Slips <= 2.0.12 – Cross-Site Scripting
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
[*, 2.0.13)
2.0.13
02/10/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.