[■] Plugin de WordPress

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

9 expedientes en el radar

Comprueba tu versión de WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels Sólo las que se están explotando

[■] Registro

Vulnerabilidades (9)

7,5 Alta

CVE-2026-93746: acceso a datos de otros usuarios (IDOR) en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2026-93746

T−36d 9 oct. 2026
6,5 Media

CVE-2026-18027: recorrido de rutas (path traversal) en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2026-18027

T−84d 22 ago. 2026
5,3 Media

CVE-2026-49056: exposición de información sensible en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2026-49056

T−165d 3 jun. 2026
4,4 Media

CVE-2025-24644: cross-site scripting (XSS) en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2025-24644

T−660d 24 ene. 2025
5,3 Media

CVE-2024-3216: falta de autorización en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2024-3216

T−954d 5 abr. 2024
6,1 Media

CVE-2024-22288: cross-site scripting (XSS) en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2024-22288

T−964d 26 mar. 2024
6,1 Media

CVE-2024-0957: cross-site scripting (XSS) en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2024-0957

T−969d 21 mar. 2024
4,3 Media

CVE-2023-7068: falta de autorización en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2023-7068

T−1048d 2 ene. 2024
7,2 Alta

CVE-2023-51546: validación de entrada incorrecta en WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

CVE-2023-51546

T−1054d 27 dic. 2023