CVE · Medium

CVE-2026-18027 — WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 5.0.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-18027 WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 5.0.0 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium 6.5 < 5.0.0 5.0.0 2026-06-03

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.