WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels vulnerabilities
1 known vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels from WebToffee. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
WebToffee WooCommerce PDF Invoices, Packing…: Authorization Bypass Through User-Controlled Key
The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the 'email' parameter of the guest print_document_from_th