plugin

Invition Print Ship Vulnerabilities

4 known security issues reported for the Invition Print Ship WordPress plugin. Most recent disclosed Sep 22, 2025.

3 medium

Running Invition Print Ship on your site? Check whether your installed version is affected.

Scan your site free

Printeers Print & Ship <= 1.17.0 - Cross-Site Request Forgery

medium

The Printeers Print & Ship plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.17.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted th...

CVSS:
4.3
Affected:
up to 1.17.0
Fix:
No patched version reported
Disclosed:
Sep 22, 2025

CVE-2025-58224 on NVD →

Printeers Print & Ship <= 1.17.0 - Missing Authorization

medium

The Printeers Print & Ship plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

CVSS:
4.3
Affected:
up to 1.17.0
Fix:
No patched version reported
Disclosed:
Aug 29, 2025

CVE-2025-52766 on NVD →

Printeers Print & Ship <= 1.17.0 - Unauthenticated Path Traversal

medium

The Printeers Print & Ship plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.17.0. This makes it possible for unauthenticated attackers to perform actions on files outside of the originally intended directory.

CVSS:
5.3
Affected:
up to 1.17.0
Fix:
No patched version reported
Disclosed:
Aug 27, 2025

CVE-2025-48081 on NVD →

Printeers Print &amp; Ship [invition-print-ship] <= 1.17.0 (unfixed)

unknown

[en] Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through 1.17.0.

Affected:
up to 1.17.0
Fix:
No patched version reported
Disclosed:
Aug 27, 2025

CVE-2025-48081 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database