Medium severity5.3NVD Advisory· Published Apr 6, 2024· Updated Apr 8, 2026
CVE-2024-3216
CVE-2024-3216
Description
The WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wt_pklist_reset_settings() function in all versions up to, and including, 4.4.2. This makes it possible for unauthenticated attackers to reset all of the plugin's settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:webtoffee:woocommerce_pdf_invoices\,_packing_slips\,_delivery_notes_and_shipping_labels:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:webtoffee:woocommerce_pdf_invoices\,_packing_slips\,_delivery_notes_and_shipping_labels:*:*:*:*:*:wordpress:*:*range: <4.4.3
- (no CPE)range: <=4.4.2
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.