WP Overnight
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WooCommerce PDF Invoices & Packing Slips | 3 | – | Jun 15, 2026 |
| PDF Invoices & Packing Slips for WooCommerce | 2 | – | Jan 26, 2024 |
| Quick/Bulk Order Form for WooCommerce | 1 | – | Jun 22, 2023 |
Exploited and recent CVEs
- CVE-2026-39472 WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability 0.4%
- CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability 0.2%
- CVE-2024-50421 WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.8.6 - Broken Access Control vulnerability 0.4%
- CVE-2024-22147 WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.7.5 is vulnerable to SQL Injection 0.6%
- CVE-2023-34170 WordPress Quick/Bulk Order Form for WooCommerce Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-47148 WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%