PT-2024-11737
CVE-2022-46795
·
Published
2024-12-13
·
Updated
2025-06-05
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Print Invoice & Delivery Notes for WooCommerce versions n/a through 4.7.2
Description
The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This can lead to a CSRF vulnerability, enabling unauthorized settings reset.
Recommendations
Update to the latest version of the plugin to secure your site.
Found an issue in the description? Have something to add? Feel free to write us 👾