CVE-2023-51546highCWE-269

CVE-2023-51546: high-severity vulnerability in WebToffee WooCommerce PDF Invoices, Packing…

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability

Published · Updated

Follow this CVE+ Monitor WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.6%
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
WebToffee · WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
Related CVEs — WebToffee WooCommerce PDF Invoices, Packing…

In the same product, most dangerous first.

CVE-2024-22288HIGHWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-24644MEDIUMWordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-49056HIGHWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerabilityEPSS 0.4%