Filtered by vendor Wpovernight Subscriptions
Total 9 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-22147 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce.This issue affects PDF Invoices & Packing Slips for WooCommerce: from n/a through 3.7.5.
CVE-2023-34170 1 Wpovernight 1 Download Quick\/bulk Order Form For Woocommerce 2024-11-21 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 versions.
CVE-2022-47148 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 leading to popup dismiss.
CVE-2022-2537 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 6.1 Medium
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting them back in an attributes of an admin page, leading to Reflected Cross-Site Scripting.
CVE-2022-2092 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 6.1 Medium
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it possible for attackers to conduct reflected cross-site scripting attacks.
CVE-2021-24991 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 4.8 Medium
The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard
CVE-2017-18506 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-21 N/A
The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
CVE-2024-50421 1 Wpovernight 1 Woocommerce Pdf Invoices\& Packing Slips 2024-11-01 5.3 Medium
Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through 3.8.6.
CVE-2024-9927 2 Wordpress, Wpovernight 2 Woocommerce Order Proposal, Woocommerce Order Proposal 2024-10-25 7.2 High
The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to log in to WordPress as an arbitrary user account, including administrators.