Wpovernight Woocommerce Pdf Invoices& Packing Slips — known CVE vulnerabilities

Every CVE whose affected-product data names Wpovernight Woocommerce Pdf Invoices& Packing Slips, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-22147 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices & Packing…
• CVE-2024-3047 — CVSS 7.2 (high): The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and…
• CVE-2024-3045 — CVSS 7.2 (high): The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters…
• CVE-2025-24373 — CVSS 6.5 (medium): woocommerce-pdf-invoices-packing-slips is an extension which allows users to create, print & automatically email PDF invoices & packing…
• CVE-2017-18506 — CVSS 6.1 (medium): The woocommerce-pdf-invoices-packing-slips plugin before 2.0.13 for WordPress has XSS via the tab or section variable on settings screens.
• CVE-2022-2092 — CVSS 6.1 (medium): The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.16.0 doesn't escape a parameter on its setting page, making it…
• CVE-2022-2537 — CVSS 6.1 (medium): The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 3.0.1 does not sanitise and escape some parameters before outputting…
• CVE-2021-24991 — CVSS 4.8 (medium): The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before…
• CVE-2022-47148 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 leading to…