WooCommerce PDF Vouchers vulnerabilities

4 known vulnerabilities in WooCommerce PDF Vouchers from WPWeb. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WooCommerce PDF Vouchers: Incorrect Privilege Assignment

  CVE-2024-54383Dec 18, 2024WPWebEPSS 1.17%

  Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through < 4.9.9.

• 9.8 Critical severity

  WooCommerce PDF Vouchers: Missing Authorization

  CVE-2024-39650Nov 1, 2024WPWeb Elite

  Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4.

• 9.3 Critical severity

  WooCommerce PDF Vouchers: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-39651Aug 13, 2024WPWeb

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.

• 7.3 High severity

  WooCommerce - PDF Vouchers: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-7027Jul 24, 2024WPWeb

  The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to insufficient verification on the user being supplied during a QR code login through the plugin. This makes it pos