Approved changes feed: RSS · Atom

cpe:2.3:a:tychesoftwares:print_invoice_\&_delivery_notes_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorTychesoftwares (db686eea-abfb-5961-9b4b-c2e0a3dc6e56)
ProductPrint Invoice & Delivery Notes For Woocommerce (4b6c010f-cc73-5a05-9b4b-9c3d2bf8d99a)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0479 vulnerable 2026-06-03 14:48:46.491542 Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS
The Print Invoice & Delivery Notes for WooCommerce WordPress plugin before 4.7.2 is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the edit_others_shop_orders capability. WooCommerce must be installed and active. This vulnerability is caused by a urldecode() after cleanup with esc_url_raw(), allowing double encoding.
Published: 2024-01-16T15:55:08.499Z
Updated: 2025-06-20T16:59:19.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46795 vulnerable 2026-06-03 14:48:26.477028 WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Print Invoice & Delivery Notes for WooCommerce: from n/a through 4.7.2.
Published: 2024-12-13T14:22:06.079Z
Updated: 2026-04-28T16:07:54.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.