CVE-2023-51546highCWE-269

CVE-2023-51546: fallo de gravedad alta en WebToffee WooCommerce PDF Invoices, Packing…

WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.2epss 0.6%
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
WebToffee · WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
CVEs relacionadas — WebToffee WooCommerce PDF Invoices, Packing…

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-22288HIGHWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-24644MEDIUMWordPress WooCommerce PDF Invoices plugin <= 4.7.1 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-49056HIGHWordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.9.4 - Sensitive Data Exposure vulnerabilityEPSS 0.4%