CVE-2022-47148: WordPress PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 - Cross Site Request Forgery (CSRF) - Patchstack

Solution

Update the WordPress WooCommerce PDF Invoices & Packing Slips plugin to the latest available version (at least 3.2.6).

Muhammad Daffa discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress WooCommerce PDF Invoices & Packing Slips Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. For example a password change which will then allow the malicious actor to login into the admin account. This vulnerability has been fixed in version 3.2.6.

5 other known vulnerabilities for this pluginTo plugin page

Report to Patchstack Alliance bounty platform and earn monthly cash prizes.

Learn more