Log out
Get PRO

Latest

Input validation vulnerability in WooCommerce PDF Invoice Builder 1.2.89

  • Severity: high-risk
  • Status: Fixed
  • Publication: August 11, 2023

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to something called SQL Injection. This is a type of attack that can allow someone with the right skills to access data stored in the plugin. Versions of the plugin up to and including 1.2.89 are affected. This is because of an issue with the way the plugin handles user supplied information, which can allow someone to add extra code to existing queries, and use them to access sensitive information.

Detected in:

PDF Builder for WooCommerce. Create invoices,packing slips and more fixed vulnerable versions:
WooCommerce PDF Invoice Builder, Create invoices, packing slips and more fixed vulnerable versions: >= * <= 1.2.89

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.