High · 7.2 CVE-2023-51546 EUVD-2023-56258GHSA-6r6g-263h-fpjq

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WebToffee Product: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Category: Web / CMS

Description

Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.

Affected products

Vendor	Product	Affected	Fixed
WebToffee	WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels	≤ 4.2.1	—

References

https://patchstack.com/database/vulnerability/print-invoices-packing-slip-labels-for-woocommerce/wordpress-woocommerce-pdf-invoices-packing-slips-delivery-notes-and-shipping-labels-plugin-4-2-1-privilege-escalation-vulnerability?_s_id=cve vdb-entry