WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 4.7.2 - CSRF Plugin Settings Reset vulnerability

CVE-2022-46795

What is CVE-2022-46795?

A vulnerability identified in Tyche Software's Print Invoice & Delivery Notes for WooCommerce plugin arises from a missing authorization control. This flaw allows attackers to exploit incorrectly configured access control mechanisms, potentially leading to unauthorized access to sensitive functions within the plugin. It primarily affects versions from n/a up to 4.7.2. This situation renders user data and system integrity at risk, necessitating immediate attention and remediation to safeguard against exploitation.

References