Wpovernight Woocommerce_pdf_invoices\&_packing_slips

9 CVEs affecting Wpovernight Woocommerce_pdf_invoices\&_packing_slips. Latest disclosed: 2025-02-04. Critical: 0, High: 3.

Top CVEs affecting Wpovernight Woocommerce_pdf_invoices\&_packing_slips
CVESeverityScorePublishedSummary
CVE-2024-22147High7.62024-01-27Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce…
CVE-2024-3047High7.22024-05-02The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.8.0 via…
CVE-2024-3045High7.22024-05-02The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, an…
CVE-2025-24373Medium6.52025-02-04woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing slips for WooCommerce o…
CVE-2022-2537Medium6.12022-08-29The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attri…
CVE-2022-2092Medium6.12022-07-11The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to…
CVE-2017-18506Medium6.12019-08-12The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
CVE-2021-24991Medium4.82022-01-03The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attr…
CVE-2022-47148Medium4.32023-03-01Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 leading to popup dismiss.