CVE-2024-3216
EUVD-2024-3180806.04.2024, 04:15
The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wt_pklist_reset_settings() function in all versions up to, and including, 4.4.2. This makes it possible for unauthenticated attackers to reset all of the plugin's settings.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| webtoffee | woocommerce_pdf_invoices\,_packing_slips\,_delivery_notes_and_shipping_labels | 𝑥 < 4.4.3 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| webtoffee | woocommerce_pdf_invoices\,_packing_slips\,_delivery_notes_and_shipping_labels | 𝑥 ≤ 4.4.2 | ADP |
Common Weakness Enumeration
References