VendorsWP Overnightwoocommerce_pdf_invoices%5C%26_packing_slipsall versions
Vulnerabilities

WP Overnight WooCommerce PDF Invoices & Packing Slips

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

9CVEs
CVE-2024-22147
WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.7.5 is vulnerable to SQL Injection
Published 2024-01-26 · Modified
7.6EPSS 0.006
CVE-2024-3045
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting
Published 2024-05-02 · Modified
7.2EPSS 0.006
CVE-2024-3047
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
Published 2024-05-02 · Modified
7.2EPSS 0.004
CVE-2025-24373
Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips
Published 2025-02-04 · Analyzed
6.5EPSS 0.005
CVE-2017-18506
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
Published 2019-08-12 · Modified
6.1EPSS 0.009
CVE-2022-2092
WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site Scripting
Published 2022-07-11 · Modified
6.1EPSS 0.008
CVE-2022-2537
WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting
Published 2022-08-29 · Modified
6.1EPSS 0.007
CVE-2021-24991
WooCommerce PDF Invoices & Packing Slips < 2.10.5 - Reflected Cross-Site Scripting
Published 2022-01-03 · Modified
4.8EPSS 0.012
CVE-2022-47148
WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-03-01 · Modified
4.3EPSS 0.002