CVE-2026-49056

HighCVSS 7.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

The WooCommerce PDF Invoices, Packing Slips, Delivery Notes, and Shipping Labels plugin versions up to 4.9.4 has a vulnerability that allows unauthorized access to sensitive data.

Risk Assessment

Organizations may be exposed to the leakage of confidential information, potentially leading to privacy breaches and loss of customer trust.

Recommendation

It is recommended to update the plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9.4 versions.