Wwpovernight

Products

Exploited and recent CVEs

• CVE-2026-109217 Medium 5.3 PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache 0.3%
• CVE-2026-107750 High 7.2 PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout 0.3%
• CVE-2026-92244 High 7.2 PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields 0.3%
• CVE-2026-13116 Medium 4.3 PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute 0.4%
• CVE-2026-1906 Medium 4.3 PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification 0.3%
• CVE-2025-24373 Medium 6.3 Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips 0.4%
• CVE-2024-3045 High 7.2 PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting 0.6%
• CVE-2024-3047 High 7.2 PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery 0.4%