The vulnerability identified as CVE-2026-25317 affects the Print Invoice & Delivery Notes for WooCommerce plugin by tychesoftwares. It is caused by missing authorization checks, allowing attackers to bypass access control mechanisms. This issue affects all versions up to and including 5.9.0. The CVSS 3.1 vector indicates that the vulnerability can be exploited remotely over the network without any privileges or user interaction, leading to a high confidentiality impact. No known exploits are reported in the wild. No patch or vendor advisory is currently available to confirm remediation status.

An attacker can remotely exploit this vulnerability without authentication or user interaction to access sensitive invoice and delivery note data that should be protected by access controls. The impact is limited to confidentiality as there is no reported integrity or availability impact. This could lead to unauthorized disclosure of potentially sensitive business information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin's functionality through other means such as web application firewalls or limiting access to trusted users only. Monitor vendor channels for updates and apply patches promptly once available.