An unauthenticated IDOR vulnerability in the WebToffee WooCommerce PDF Invoices plugin allows attackers to retrieve sensitive customer order documents by supplying a known email address.
WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
web-vulnerability
idor
wordpress
1t
1c