Tychesoftwares Print Invoice \& Delivery Notes For Woocommerce vulnerabilities
9 vulnerabilities
Known vulnerabilities in Tychesoftwares Print Invoice \& Delivery Notes For Woocommerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-13773tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1
EPSS score3.71%
The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update' function. This is due to missing capability check in the 'WooCommerce_Delivery_Notes::update' function, PHP enabled in Dompdf, and missing escape in the 'template.php' file. This makes it possible for unauthenticated attackers to execute code on the server.CVE-2025-49239tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1EPSS score0.15%
Cross-Site Request Forgery (CSRF) vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Cross Site Request Forgery.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.5.0.CVE-2022-46795tyche softwaresprint invoice & delivery notes for woocommerce+2EPSS score0.60%
Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2.CVE-2024-13640tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1EPSS score0.54%
The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.4.1 via the 'wcdn/invoice' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/wcdn/invoice directory which can contain invoice files if an email attachment setting is enabled.CVE-2024-12210tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1EPSS score0.28%
The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdn_remove_shoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove the shop's logo.CVE-2026-25317tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1EPSS score0.33%
Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.9.0.CVE-2026-56060tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1EPSS score0.42%
Unauthenticated Sensitive Data Exposure in Print Invoice & Delivery Notes for WooCommerce <= 7.1.1 versions.CVE-2026-24946tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+1EPSS score0.23%
Missing Authorization vulnerability in tychesoftwares Print Invoice & Delivery Notes for WooCommerce woocommerce-delivery-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through <= 5.8.0.CVE-2023-0479tychesoftwaresprint_invoice_\&_delivery_notes_for_woocommerce+2EPSS score0.52%
The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.