Printeers Print & Ship <= 1.17.0 - Cross-Site Request Forgery
medium
The Printeers Print & Ship plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.17.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted th...
- CVSS:
- 4.3
- Affected:
- up to 1.17.0
- Fix:
- No patched version reported
- Disclosed:
- Sep 22, 2025
CVE-2025-58224 on NVD →
Printeers Print & Ship <= 1.17.0 - Missing Authorization
medium
The Printeers Print & Ship plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.
- CVSS:
- 4.3
- Affected:
- up to 1.17.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 29, 2025
CVE-2025-52766 on NVD →
Printeers Print & Ship <= 1.17.0 - Unauthenticated Path Traversal
medium
The Printeers Print & Ship plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.17.0. This makes it possible for unauthenticated attackers to perform actions on files outside of the originally intended directory.
- CVSS:
- 5.3
- Affected:
- up to 1.17.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 27, 2025
CVE-2025-48081 on NVD →
Printeers Print & Ship [invition-print-ship] <= 1.17.0 (unfixed)
unknown
[en] Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through 1.17.0.
- Affected:
- up to 1.17.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 27, 2025
CVE-2025-48081 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database