Known vulnerabilities in PDF Invoices & Packing Slips for WooCommerce
Create, print & automatically email PDF or XML Invoices & PDF Packing Slips for WooCommerce orders.
14Reported vulnerabilities
7.2Highest CVSS score
5.16.0Latest version
300,000+Active installs
What to do now
Update PDF Invoices & Packing Slips for WooCommerce to 5.15.0 or later.
14 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2022-2537 | Medium | 0.7% | 2.14.0 up to (but not including) 3.0.1 | 3.0.1 |
August 29, 2022 |
| CVE-2022-2092 | Medium | 0.8% | Before 2.16.0 | 2.16.0 |
July 11, 2022 |
| CVE-2021-24991 | Medium | 1.2% | Before 2.10.5 | 2.10.5 |
January 3, 2022 |
| CVE-2024-3047 | High | 0.4% | Before 3.8.1 | 3.8.1 |
May 2, 2024 |
| CVE-2024-22147 | High | 0.6% | 3.7.6 and earlier | 3.7.7 |
January 12, 2024 |
| CVE-2026-39472 | Medium | 0.4% | Before 5.9.0 | 5.9.0 |
April 20, 2026 |
| CVE-2024-3045 | Medium | 0.6% | Before 3.8.1 | 3.8.1 |
May 2, 2024 |
| CVE-2017-18506 | Medium | 0.9% | Before 2.0.13 | 2.0.13 |
August 12, 2019 |
| WF-b96349da-e2b4-4b29-94b4-1039427bce8e | Medium | — | 2.14.5 to 2.14.5 (inclusive) | 2.15 |
June 7, 2022 |
| CVE-2024-50421 | Medium | 0.4% | 3.8.6 and earlier | 3.8.7 |
October 24, 2024 |
| CVE-2026-13116 | Medium | 0.4% | 0 to 5.14.0 (inclusive) | 5.15.0 |
July 11, 2026 |
| CVE-2026-1906 | Medium | 0.3% | 0 to 5.6.0 (inclusive) | 5.7.0 |
February 18, 2026 |
| CVE-2025-67589 | Medium | 0.2% | 4.9.1 and earlier | 5.0.0 |
December 7, 2025 |
| CVE-2022-47148 | Medium | 0.2% | 3.2.5 and earlier | 3.2.6 |
January 27, 2023 |