¿Es seguro Print Invoices Packing Slip Labels For Woocommerce?

Qué hace este plugin

• Slug: print-invoices-packing-slip-labels-for-woocommerce
• 50000+ instalaciones activas

packing slipsshipping labelwoocommerce invoicewoocommerce pdf invoiceswoocommerce print invoice

Estado de mantenimiento

• Última versión conocida: 4.9.7
• Requiere PHP: 5.6+
• PHP máximo soportado (analizado): 8.4

Vulnerabilidades conocidas

7 CVEs conocidos registrados para Print Invoices Packing Slip Labels For Woocommerce. Reportadas entre 2023 y 2026.

CVE-2026-49056

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.4. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2025-24644

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Shop Manager-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

CVE-2024-3216

Update the WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin to the latest available version (at least 4.4.3). Krzysztof Zając discovered and reported this Broken Access Control vulnerability in WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 4.4.3. Have additional information or questions about this entry? Get in touch.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2024-22288

Update the WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin to the latest available version (at least 4.4.1). Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 4.4.1. This vulnerability was reported to and published by Patchstack. Our users receive alerts and protections up to 48 hours in advance. Have additional information or questions about this entry? Get in touch.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2024-0957

Update the WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin to the latest available version (at least 4.4.2). Colin Xu discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 4.4.2. Have additional information or questions about this entry? Get in touch.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2023-7068

Update the WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin to the latest available version (at least 4.3.1). Lucio Sá discovered and reported this Broken Access Control vulnerability in WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 4.3.1. Have additional information or questions about this entry? Get in touch.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

CVE-2023-51546

Update the WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin to the latest available version (at least 4.3.0). Rafie Muhammad (Patchstack) discovered and reported this Privilege Escalation vulnerability in WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels Plugin. This could allow a malicious actor to escalate their low privileged account to something with higher privileges. After this they could take full control of the website if high privileges are gained. This vulnerability has been fixed in version 4.3.0. Have additional information or questions about this entry? Get in touch.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Cómo solucionarlo

Mantén Print Invoices Packing Slip Labels For Woocommerce actualizado — 4.9.7 es la última versión en wordpress.org, y cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en").

Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.

Alternativas más seguras / más establecidas

• PDF Invoices & Packing Slips for WooCommerce — 300000+ instalaciones activas — 100/100 (1858) — PHP máx. 8.4
• Print Invoice & Delivery Notes for WooCommerce — 30000+ instalaciones activas — 88/100 (136) — PHP máx. <8.0
• Invoices for WooCommerce — 10000+ instalaciones activas — 94/100 (469) — PHP máx. 8.4
• PDF Invoices and Packing Slips For WooCommerce — 1000+ instalaciones activas — 100/100 (19)