Skip to content
OpenAdvisories
High · 7.5 CVE-2026-49056 EUVD-2026-36869GHSA-pvhc-cw6m-9mp8

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerability

Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Vendor: WebToffee Product: WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Category: Web / CMS

Description

Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions.

Affected products

VendorProductAffectedFixed
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels ≤ 4.9.4 —

References