WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.7.5 is vulnerable to SQL Injection

CVE-2024-22147

What is CVE-2024-22147?

The vulnerability in WP Overnight's PDF Invoices & Packing Slips for WooCommerce arises from improper neutralization of special elements utilized in SQL commands, commonly known as SQL Injection. This flaw allows an attacker to manipulate SQL queries by injecting arbitrary SQL code, which could lead to unauthorized access to sensitive data, and potentially compromise the entire application. The affected versions range from n/a through 3.7.5, underscoring the importance for users to implement patches and updates promptly to safeguard against exploit attempts.

References