CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.
Explanation of Vulnerability in Simple Terms
The WooCommerce PDF Invoices plugin through version 4.2.1 contains a privilege management flaw that allows high-privileged users to read sensitive data, modify site content, or disrupt service. The vulnerability requires administrator-level access to exploit. Site owners should update to a version newer than 4.2.1 immediately.
What an attacker can do
Read sensitive data, modify content, or disrupt the site if they have admin-level access.
Potential impact on your site
Compromised admin accounts can access invoices, modify orders, or disable the plugin's functionality.
Conditions required to exploit
Attacker must have administrator or equivalent high-level privileges on the WordPress site.
Key dates
External resources
Related vulnerabilities
