CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
WooCommerce PDF Invoices & Packing Slips Plugin Sensitive Information Exposure (CVE-2026-109217)
[Affected Scope] WooCommerce PDF Invoices & Packing Slips WordPress plugin up to and including version 5.16.5
[Impact] Unauthenticated attackers can extract complete PDF invoices of other customers, including billing/shipping addresses, order notes, and pricing, delivered directly to the attacker's email
[Mitigation] Immediately upgrade the plugin to version 5.16.6 or higher, and disable the yearly invoice number reset option as a temporary workaround