Skip to content
OpenAdvisories

Vendor

WP Overnight

15 known vulnerabilities.

Products

PDF Invoices & Packing Slips for WooCommerce 9 woocommerce-pdf-invoices-packing-slips 4 WooCommerce Order Proposal 1 Quick/Bulk Order Form for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.2
    CVE-2026-107750

    PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout

    The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'billing_address.first_name / last_name / company, customer_note' parameter in all versions up to, and including, 5.16.4 due to insuffic…

    WP Overnight PDF Invoices & Packing Slips for WooCommerce Web / CMS
  • High 7.2
    CVE-2026-92244

    PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

    The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versions up to, and including, 5.16.1 due to insufficient input sanitization and outp…

    WP Overnight PDF Invoices & Packing Slips for WooCommerce Web / CMS
  • High 7.2
    CVE-2026-39472

    WordPress WooCommerce PDF Invoices & Packing Slips plugin < 5.9.0 - PHP Object Injection vulnerability

    Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions.

    WP Overnight woocommerce-pdf-invoices-packing-slips Web / CMS
  • High 7.2
    CVE-2024-9927

    WooCommerce Order Proposal <= 2.0.5 - Authenticated (Shop Manager+) Privilege Escalation via Order Proposal

    The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible …

    WP Overnight WooCommerce Order Proposal Web / CMS
  • High 7.2
    CVE-2024-3045

    PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting

    The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it possibl…

    WP Overnight PDF Invoices & Packing Slips for WooCommerce Web / CMS
  • High 7.2
    CVE-2024-3047

    PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery

    The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3.8.0 via the transform() function. This can allow unauthenticated attackers to make web requests to arbitrary…

    WP Overnight PDF Invoices & Packing Slips for WooCommerce Web / CMS
  • High 7.6
    CVE-2024-22147

    WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.7.5 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooCommerce: from n/a through 3.7.5.

    WP Overnight PDF Invoices & Packing Slips for WooCommerce Web / CMS