WW
Product
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
5
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93746 | 7.5 | Oct 10 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 5.0.2 - Insecure Direct Object Reference to Unauthenticated Unauthorized Order Document Access via 'email' Parameter Affected: through 5.0.2 |
| CVE-2026-18027 | 6.5 | Aug 22 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter Affected: through 4.9.8 |
| CVE-2023-7068 | 6.5 | Jan 3 | WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export Affected: through 4.3.0 |
| CVE-2024-0957 | 6.1 | Mar 22 | WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting Affected: through 4.4.1 |
| CVE-2024-3216 | 5.3 | Apr 6 | WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset Affected: through 4.4.2 |
Showing 5