Description
PDF Invoices & Packing Slips for WooCommerce是WP Overnight开源的一个为 WooCommerce 订单创建、打印和自动发送 PDF 发票的工具。 PDF Invoices & Packing Slips for WooCommerce 4.0.0之前版本存在信息泄露漏洞，该漏洞源于允许未经授权的用户访问商店中的任何PDF文档。
PDF Invoices & Packing Slips for WooCommerce 信息泄露漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://avd.aliyun.com/detail?id=AVD-2026-1906
https://nvd.nist.gov/vuln/detail/CVE-2026-1906
https://www.wordfence.com/threat-intel/vulnerabilities/id/2e1922c6-e63b-47aa-97de-1e2382fa25d3
https://freshysites.com/security-bulletins/wordpress-security-bulletin-pdf-invoices-packing-slips-for-woocommerce-plugin-cve-2026-1906/
https://wpscan.com/vulnerability/1fb1ccfe-dc17-4577-bdb4-c3fe22964b39/
https://github.com/wpovernight/woocommerce-pdf-invoices-packing-slips/security/advisories/GHSA-3j9m-cp35-94fr
https://research.cleantalk.org/cve-2026-1906/
https://www.rapid7.com/db/vulnerabilities/woocommerce-pdf-invoices-packing-slips-plugin-cve-2026-1906/
https://cve.imfht.com/product/PDF%20Invoices%20&%20Packing%20Slips%20for%20WooCommerce