Invoct – Pdf Invoices & Billing For Woocommerce
The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress has a flaw that allows unauthorized access to data. This is due to a missing capability check in multiple functions. Authenticated attackers with Subscriber-level access or higher can retrieve invoice clients, invoice items, and a list of WordPress users along with their email addresses.