CVE-2023-51546: WordPress WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin <= 4.2.1 - Privilege Escalation vulnerability
First published: Fri May 17 2024(Updated: )
Improper Privilege Management vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Privilege Escalation.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.2.1.
Credit: audit@patchstack.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels | <=4.2.1 | |
| WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels | <=4.2.1 | |
| WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels | <4.3.0 |
Remedy
Update to 4.3.0 or a higher version.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-51546?
CVE-2023-51546 is a high severity vulnerability that allows privilege escalation in the affected plugin.
How do I fix CVE-2023-51546?
To fix CVE-2023-51546, update the WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin to version 4.3.0 or later.
Who is affected by CVE-2023-51546?
CVE-2023-51546 affects all versions of the WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin up to 4.2.1.
What type of vulnerability is CVE-2023-51546?
CVE-2023-51546 is categorized as an improper privilege management vulnerability.
Can CVE-2023-51546 be exploited remotely?
Yes, CVE-2023-51546 can be exploited remotely to escalate privileges.
- agent/weakness
- agent/references
- agent/title
- agent/remedy
- agent/description
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- collector/nvd-api
- source/NVD
- agent/softwarecombine
- agent/event
- agent/last-modified-date
- vendor/webtoffee
- canonical/woocommerce pdf invoices, packing slips, delivery notes and shipping labels
- vendor/wordpress
- canonical/webtoffee woocommerce pdf invoices, packing slips, delivery notes and shipping labels