Printus Cloud Printing For Woocommerce Vulnerabilities

The Printus – Automatic Printing Plugin for WooCommerce – Print WooCommerce Orders, PDF Invoices, Packaging Slips & More plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.6. This makes it possible for authenticated attacke...

CVSS:

4.3

Affected:

up to 1.2.6

Fixed in:

1.2.7

Disclosed:

Apr 1, 2025

CVE-2025-31830 on NVD →

[en] Missing Authorization vulnerability in Uriahs Victor Printus allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Printus: from n/a through 1.2.6.

Affected:

up to 1.2.7

Fixed in:

1.2.7

Disclosed:

Apr 1, 2025

CVE-2025-31830 on NVD →

The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

1.0.0 – 1.1.2

Fixed in:

1.1.3

Disclosed:

Jul 18, 2023

CVE-2023-33999 on NVD →

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Affected:

up to 1.1.3

Fixed in:

1.1.3

CVE-2023-33999 on NVD →