WordPress Plugin Vulnerabilities
WooCommerce PDF Invoices & Packing Slips < 5.0.0 - Missing Authorization
Description
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.9.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.
Affects Plugins
Fixed in 5.0.0 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Phat RiO - BlueRock
Verified
No
WPVDB ID
Timeline
Publicly Published
2025-12-07 (about 5 months ago)
Added
2025-12-11 (about 5 months ago)
Last Updated
2025-12-11 (about 5 months ago)
WPScan 