WebToffee WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

• CVE-2026-93746 High 7.5 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Parameter 0.5%
• CVE-2026-18027 Medium 6.5 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter 0.9%
• CVE-2024-3216 Medium 5.3 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset 0.4%
• CVE-2024-0957 Medium 6.1 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting 0.4%
• CVE-2023-7068 Medium 4.3 WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export 0.4%