{"id":"CVE-2024-22147","aliases":["EUVD-2024-19743","GHSA-72f8-cff4-m65v"],"status":"published","title":"WordPress WooCommerce PDF Invoices \u0026 Packing Slips Plugin \u003c= 3.7.5 is vulnerable to SQL Injection","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices \u0026 Packing Slips for WooCommerce.This issue affects PDF Invoices \u0026 Packing Slips for WooCommerce: from n/a through 3.7.5.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0058,"percentile":0.47986,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-01-26T23:15:02Z","modified":"2026-06-17T07:10:49Z","products":[{"vendor":"wp overnight","product":"pdf invoices \u0026 packing slips for woocommerce"},{"vendor":"wpovernight","product":"pdf invoices \u0026 packing slips for woocommerce"},{"vendor":"wpovernight","product":"woocommerce_pdf_invoices\\\u0026_packing_slips"}],"references":[{"url":"https://patchstack.com/database/vulnerability/woocommerce-pdf-invoices-packing-slips/wordpress-pdf-invoices-packing-slips-for-woocommerce-plugin-3-7-5-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22147"},{"url":"https://github.com/advisories/GHSA-72f8-cff4-m65v"}],"sources":{"cve":[{"id":"CVE-2024-22147","title":"WordPress WooCommerce PDF Invoices \u0026 Packing Slips Plugin \u003c= 3.7.5 is vulnerable to SQL Injection","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices \u0026 Packing Slips for WooCommerce.This issue affects PDF Invoices \u0026 Packing Slips for WooCommerce: from n/a through 3.7.5.","status":"published","published":"2024-01-26T23:15:02.859Z","modified":"2026-04-28T16:09:08.661Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:00.254134Z"}],"euvd":[{"id":"EUVD-2024-19743","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices \u0026 Packing Slips for WooCommerce.This issue affects PDF Invoices \u0026 Packing Slips for WooCommerce: from n/a through 3.7.5.","status":"published","published":"2024-01-26T23:15:02Z","modified":"2026-04-28T16:09:08Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:24:00.858878Z"}],"ghsa":[{"id":"GHSA-72f8-cff4-m65v","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices \u0026 Packing Slips for WooCommerce.This issue affects PDF Invoices \u0026 Packing Slips for WooCommerce: from n/a through 3.7.5.","status":"published","published":"2024-01-27T00:31:23Z","modified":"2026-04-28T21:34:54Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:07:46.344412Z"}],"nvd":[{"id":"CVE-2024-22147","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Overnight PDF Invoices \u0026 Packing Slips for WooCommerce.This issue affects PDF Invoices \u0026 Packing Slips for WooCommerce: from n/a through 3.7.5.","status":"published","published":"2024-01-27T00:15:24.567Z","modified":"2026-06-17T07:10:49.697Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:09:32.147098Z"}]}}