CVE-2023-4245

Summary

CVE-2023-4245: A vulnerability has been identified in the WooCommerce PDF Invoice Builder plugin for WordPress. The issue lies in the GetInvoiceDetail function, which lacks adequate capability checks in versions up to 1.2.89. This weakness enables subscribers to unauthorizedly access invoice data by guessing the order and invoice IDs. The potential impact includes exposure of sensitive financial information. Users are urged to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.