WooCommerce PDF Invoice Builder vulnerabilities

2 known vulnerabilities in WooCommerce PDF Invoice Builder from RedNao. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WooCommerce PDF Invoice Builder: Cross-Site Request Forgery

  CVE-2023-51486Mar 16, 2024RedNao

  Cross-Site Request Forgery (CSRF) vulnerability in RedNao WooCommerce PDF Invoice Builder.This issue affects WooCommerce PDF Invoice Builder: from n/a through 1.2.101.

• 8.8 High severity

  PDF Builder for WooCommerce. Create…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-3677Aug 31, 2023Edgarrojas

  The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to SQL Injection via the pageId parameter in versions up to, and including, 1.2.89 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis