Now officially on WordPress.org

CVE Database / CVE-2022-46795

CVE · Medium

CVE-2022-46795 — Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 4.7.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-46795 Print Invoice & Delivery Notes for WooCommerce [woocommerce-delivery-notes] < 4.7.3 Missing Authorization Medium 6.5 < 4.7.3 4.7.3 2023-03-13 —

CVE-2022-46795

The Print Invoice & Delivery Notes for WooCommerce plugin through version 4.7.2 contains a cross-site request forgery vulnerability in the ts_reset_tracking_setting function due to insufficient nonce verification. An attacker could craft a malicious request to reset usage tracking settings if they trick a site administrator into clicking a link, without requiring authentication. This flaw was patched in version 4.7.3.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings