https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 23:43:14 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-93746 <p>The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes &amp; Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the &#39;email&#39; parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order&#39;s printable documents when the attacker-supplied (base64-encoded) &#39;email&#39; equals the order&#39;s billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents (&#39;wt_pklist_print_button_access_for&#39; != &#39;logged_in&#39;), to retrieve any other customer&#39;s invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.</p> <p>The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes &amp; Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the &#39;email&#39; parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order&#39;s printable documents when the attacker-supplied (base64-encoded) &#39;email&#39; equals the order&#39;s billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents (&#39;wt_pklist_print_button_access_for&#39; != &#39;logged_in&#39;), to retrieve any other customer&#39;s invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-93746 https://vulnerability.circl.lu/vuln/ghsa-wjmp-g49r-xp3p <p>The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes &amp; Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the &#39;email&#39; parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order&#39;s printable documents when the attacker-supplied (base64-encoded) &#39;email&#39; equals the order&#39;s billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents (&#39;wt_pklist_print_button_access_for&#39; != &#39;logged_in&#39;), to retrieve any other customer&#39;s invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.</p> <p>The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes &amp; Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.0.2 via the &#39;email&#39; parameter of the guest print_document_from_the_mail_link handler dispatched from print_window() on init. This is due to the handler authorizing access to an order&#39;s printable documents when the attacker-supplied (base64-encoded) &#39;email&#39; equals the order&#39;s billing email — a non-secret identifier — instead of requiring the WooCommerce order_key. This makes it possible for unauthenticated attackers, when the site is configured to allow guest access to documents (&#39;wt_pklist_print_button_access_for&#39; != &#39;logged_in&#39;), to retrieve any other customer&#39;s invoice, packing slip, delivery note, dispatch label or shipping label — including customer name, billing/shipping address, phone number, purchased products, prices, taxes and invoice metadata — by knowing the target order ID and the associated billing email address.</p> https://vulnerability.circl.lu/vuln/ghsa-wjmp-g49r-xp3p