CVE-2022-47148

The WooCommerce PDF Invoices & Packing Slips plugin before version 3.2.6 contains a cross-site request forgery vulnerability that could enable an attacker to trick authenticated users into performing unintended actions while logged in, such as changing passwords to grant the attacker administrative access. Muhammad Daffa identified and disclosed this flaw, which affects all versions prior to 3.2.6 where it was remedied.

Based on public CVE data (MITRE/NVD).