PLUGIN SECURITY
Is Print Invoices Packing Slip Labels For Woocommerce safe?
Auto-generate and attach WooCommerce PDF invoices and packing slips to order emails with customizable templates & bulk print options.
What this plugin does
- Slug:
print-invoices-packing-slip-labels-for-woocommerce - Author: WebToffee
- 50000+ active installs
- 98/100 rating (284 reviews on wordpress.org)
- 2640816 all-time downloads
- On WordPress.org since 2016-06-15
packing slipsshipping labelwoocommerce invoicewoocommerce pdf invoiceswoocommerce print invoice
Maintenance status
- Latest known version: 4.9.8
- Last updated: 2026-08-20 8:49am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
8 known CVEs on file for Print Invoices Packing Slip Labels For Woocommerce. Reported between 2023 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-49056 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.9.5 | Exposure of Sensitive System Information to an Unauthorized Control Sphere | High 7.5 | < 4.9.5 | 4.9.5 | 2026-06-03 | ✓ fixed in latest |
| CVE-2026-18027 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 5.0.0 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Medium 6.5 | < 5.0.0 | 5.0.0 | 2026-06-03 | ⚠ update needed |
| CVE-2025-24644 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.7.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 4.7.2 | 4.7.2 | 2025-01-24 | ✓ fixed in latest |
| CVE-2024-3216 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.4.3 | Missing Authorization | Medium 5.3 | < 4.4.3 | 4.4.3 | 2024-04-05 | ✓ fixed in latest |
| CVE-2024-22288 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.4.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 4.4.1 | 4.4.1 | 2024-03-26 | ✓ fixed in latest |
| CVE-2024-0957 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.4.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 4.4.2 | 4.4.2 | 2024-03-21 | ✓ fixed in latest |
| CVE-2023-7068 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.3.1 | Missing Authorization | Medium 6.5 | < 4.3.1 | 4.3.1 | 2024-01-02 | ✓ fixed in latest |
| CVE-2023-51546 | WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels [print-invoices-packing-slip-labels-for-woocommerce] < 4.3.0 | Improper Privilege Management | High 7.2 | < 4.3.0 | 4.3.0 | 2023-12-27 | ✓ fixed in latest |
How to fix it
Keep Print Invoices Packing Slip Labels For Woocommerce updated — 4.9.8 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- PDF Invoices & Packing Slips for WooCommerce — 300000+ active installs — 100/100 (1862) — max PHP 8.4
- Print Invoice & Delivery Notes for WooCommerce — 30000+ active installs — 88/100 (137) — max PHP <8.0
- Invoices for WooCommerce — 10000+ active installs — 94/100 (469) — max PHP 8.4
- PDF Invoices and Packing Slips For WooCommerce — 1000+ active installs — 100/100 (19)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.