wpovernight vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20251
3. 20265

Newest CVEs

• CVE-2026-109217

  PDF Invoices & Packing Slips for WooCommerce <= 5.16.5 - Unauthenticated Sensitive Information Exposure via Yearly-Reset Invoice Attachment Cache

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  Medium5.3
• CVE-2026-107750

  PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company / Customer Note fields at guest checkout

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  High7.2
• CVE-2026-92244

  PDF Invoices & Packing Slips for WooCommerce <= 5.16.1 - Unauthenticated Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  High7.2
• CVE-2026-13116

  PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode Attribute

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  Medium4.3
• CVE-2026-1906

  PDF Invoices & Packing Slips for WooCommerce <= 5.6.0 - Missing Authorization to Authenticated (Subscriber+) Peppol Identifier Modification

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  Medium4.3
• CVE-2025-24373

  Unrestricted Access to PDF Documents via URL Manipulation in woocommerce-pdf-invoices-packing-slips

  wpovernight · woocommerce-pdf-invoices-packing-slips

  Medium6.3
• CVE-2024-3045

  PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  High7.2
• CVE-2024-3047

  PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery

  wpovernight · PDF Invoices & Packing Slips for WooCommerce

  High7.2