CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 2.0.8.
Explanation of Vulnerability in Simple Terms
WooCommerce PDF Invoice Builder versions 2.0.8 and earlier contain an exposure of sensitive information vulnerability. An authenticated user with low privileges can read confidential data they should not have access to, such as invoice details or customer information. The vulnerability requires network access and valid login credentials but no additional user interaction.
What an attacker can do
Read sensitive invoice or customer data without authorization.
Potential impact on your site
Customer invoice data and sensitive business information may be exposed to authenticated users who should not see it.
Conditions required to exploit
Valid login account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
