Tychesoftwares Print Invoice Delivery Notes For Woocommerce vulnerabilities

CVE-2025-13773 [CRITICAL] CWE-94 CVE-2025-13773: The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update' function. This is due to missing capability check in the 'WooCommerce_Delivery_Notes::update' function, PHP enabled in Dompdf, and missing escape in t

CVE-2026-56060 [HIGH] CWE-497 CVE-2026-56060: Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 v Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions.

CVE-2026-25317 [HIGH] CWE-862 CVE-2026-25317: Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.9.0.

CVE-2026-24946 [MEDIUM] CWE-862 CVE-2026-24946: Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.8.0.

CVE-2022-46795 [MEDIUM] CWE-862 CVE-2022-46795: Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerc Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2.

CVE-2024-13640 [MEDIUM] CWE-200 CVE-2024-13640: The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive I The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/wcdn/invoice directory which

CVE-2023-0479 [MEDIUM] CWE-79 CVE-2023-0479: The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to re The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerabilit

CVE-2025-49239 [MEDIUM] CWE-352 CVE-2025-49239: Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.5.0.

CVE-2024-12210 [MEDIUM] CWE-862 CVE-2024-12210: The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorize The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdn_remove_shoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove the s