VULNERABILITY INTELLIGENCE
CVE-2023-51546
CVSS score7.2 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2024-05-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.
Weakness classification
- audit@patchstack.com: CWE-269
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- audit@patchstack.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory