CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.8.0.
Explanation of Vulnerability in Simple Terms
The Print Invoice & Delivery Notes for WooCommerce plugin through version 5.8.0 does not properly check user permissions before allowing access to sensitive functions. An unauthenticated attacker can modify or delete invoices and delivery notes without authorization. Site owners should update to a version newer than 5.8.0 immediately.
What an attacker can do
Modify or delete invoices and delivery notes without logging in or having permission.
Potential impact on your site
Attackers can tamper with or destroy invoice records, disrupting order documentation and potentially affecting compliance.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
