plugin

Share Print Pdf Woocommerce Vulnerabilities

6 known security issues reported for the Share Print Pdf Woocommerce WordPress plugin. Most recent disclosed Dec 30, 2025.

1 high 1 medium

Running Share Print Pdf Woocommerce on your site? Check whether your installed version is affected.

Scan your site free

Share, Print and PDF Products for WooCommerce [share-print-pdf-woocommerce] <= 3.1.2 (unfixed)

unknown

[en] Missing Authorization vulnerability in XforWooCommerce Share, Print and PDF Products for WooCommerce share-print-pdf-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Share, Print and PDF Products for WooCommerce: from n/a through <= 3.1.2.

Affected:
up to 3.1.2
Fix:
No patched version reported
Disclosed:
Dec 30, 2025

CVE-2025-68993 on NVD →

Share, Print and PDF Products for WooCommerce <= 3.1.2 - Missing Authorization

medium

The Share, Print and PDF Products for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 3.1.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:
5.3
Affected:
up to 3.1.2
Fix:
No patched version reported
Disclosed:
Dec 23, 2025

CVE-2025-68993 on NVD →

Share, Print and PDF Products for WooCommerce [share-print-pdf-woocommerce] < 2.8.0

unknown

[en] Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wp_ajax_svx_ajax_factory function in various versions listed below. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to read, edit, or...

Affected:
up to 2.8.0
Fixed in:
2.8.0
Disclosed:
Jun 7, 2023

CVE-2021-4337 on NVD →

Share, Print and PDF Products for WooCommerce [share-print-pdf-woocommerce] < 2.8.0

unknown

Multiple vulnerabilities (Authenticated Arbitrary WordPress Options Change, Read and Deletion / Authenticated User Enumeration / Authenticated Plugin Settings Change, Import and Export) were discovered by Jerome Bruandet (NinTechNet) in WordPress Share, Print and PDF Products for WooCommerce plugin (versions <= 2.7.1).

Affected:
up to 2.8.0
Fixed in:
2.8.0
Disclosed:
Sep 20, 2021

Multiple XforWooCommerce Add-On Plugins (Various Versions) - Missing Authorization

high

Sixteen XforWooCommerce Add-On Plugins for WordPress are vulnerable to authorization bypass due to a missing capability check on the wp_ajax_svx_ajax_factory function in various versions listed below. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to read, edit, or dele...

CVSS:
8.8
Affected:
up to 2.8.0
Fixed in:
2.8.0
Disclosed:
Sep 7, 2021

CVE-2021-4337 on NVD →

Share, Print and PDF Products for WooCommerce [share-print-pdf-woocommerce] < 2.8.0

unknown

The svx_ajax_factory AJAX action of the plugins, available to authenticated users, do not have CSRF and capability checks, which could allow any authenticated user, such as subscriber to change/view/delete arbitrary WordPress options, retrieve the list of users, import/export/update the plugins&#039; settings.

Affected:
up to 2.8.0
Fixed in:
2.8.0

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database