Vulnerabilities / PDF Invoices & Packing Slips for WooCommerce
PDF Invoices & Packing Slips for WooCommerce vulnerabilities
Advisories WPSec published for PDF Invoices & Packing Slips for WooCommerce. Other sources may list more. Its attack surface: PDF Invoices & Packing Slips for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1303 | PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Insecure Direct Object Reference to Order Document Disclosure via Document Shortcode | Medium 5.9 | 5.16.5 |
| 2026-10-21 | WPSEC-2026-1302 | PDF Invoices & Packing Slips for WooCommerce <= 5.16.4 - Unauthenticated Stored Cross-Site Scripting via Order Address, Custom Field, and Note Values | Medium 5.4 | 5.16.5 |
| 2026-10-10 | WPSEC-2026-0740 | PDF Invoices & Packing Slips for WooCommerce <= 5.16.3 - Authenticated (Subscriber+) Missing Authorization to Order Information Disclosure via Document Number Preview | Medium 4.3 | 5.16.4 |
License: CC BY 4.0