Threats tagged 'ghsa-8j84-cw28-3pw7'

The PDF Invoices & Packing Slips for WooCommerce WordPress plugin up to version 5.16.5 has a vulnerability that allows unauthenticated attackers to access complete invoice PDFs of other customers. This occurs via the 'invoice_number' parameter in the document filename when the plugin's yearly invoice number reset option is enabled. Exploitation requires the attacker to place a guest checkout order that triggers a processing email within 60 seconds of a victim's order sharing the same yearly-reset invoice number. The exposed invoice contains sensitive information such as billing and shipping addresses, private order notes, line items, prices, dates, order ID, and invoice number.