Login Request a demo
WW
Product
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
by webtoffee · last CVE Oct 10, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18027
6.5
1%
Aug 22
WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter
Affected: through 4.9.8
CVE-2023-7068
6.5
0%
Jan 3
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.3.0 - Missing Authorization to Order Export
Affected: through 4.3.0
CVE-2024-0957
6.1
0%
Mar 22
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting
Affected: through 4.4.1
CVE-2024-3216
5.3
0%
Apr 6
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.4.2 - Missing Authorization to Unauthenticated Settings Reset
Affected: through 4.4.2
Showing 4