Threat Database

Threat Entry Updated 2026-06-17

Woocommerce Pdf Vouchers - Cross-Site Scripting (XSS) (CVE-2024-56265)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a through < 4.9.9.

PLUGIN Woocommerce Pdf Vouchers

CVE-2024-56265

HIGH CVSS 7.1 2024-12-31

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Woocommerce Pdf Vouchers - Privilege Escalation (CVE-2024-54383)

Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through < 4.9.9.

PLUGIN Woocommerce Pdf Vouchers

CVE-2024-54383

CRITICAL CVSS 9.8 2024-12-18

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Woocommerce Pdf Vouchers - Broken Access Control (CVE-2024-39650)

Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4.

PLUGIN Woocommerce Pdf Vouchers

CVE-2024-39650

HIGH CVSS 7.3 2024-11-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Woocommerce Pdf Vouchers - Path Traversal (CVE-2024-39651)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.

PLUGIN Woocommerce Pdf Vouchers

CVE-2024-39651

HIGH CVSS 8.6 2024-08-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Woocommerce Pdf Vouchers - Cross-Site Scripting (XSS) (CVE-2024-39652)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.

PLUGIN Woocommerce Pdf Vouchers

CVE-2024-39652

HIGH CVSS 7.1 2024-08-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

WooCommerce - PDF Vouchers - Authentication Bypass (CVE-2024-7027)

The WooCommerce - PDF Vouchers plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 4.9.3. This is due to insufficient verification on the user being supplied during a QR code login through the plugin. This makes it possible for unauthenticated attackers to log in as any existing Voucher Vendor user on the site, if they have access to the user id.

PLUGIN WooCommerce - PDF Vouchers

CVE-2024-7027

HIGH CVSS 7.3 2024-07-24

Risk Score

Open Full Technical Breakdown