<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: woocommerce pdf vouchers</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-56265: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in wpweb Wo</title><link>https://patchthecve.com/cve/CVE-2024-56265.html</link><guid>https://patchthecve.com/cve/CVE-2024-56265.html</guid><pubDate>Wed, 17 Jun 2026 08:11:56 +0000</pubDate><description>HIGH 7.1: Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a through &lt; 4.9.9.</description></item><item><title>CVE-2024-54383: Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows</title><link>https://patchthecve.com/cve/CVE-2024-54383.html</link><guid>https://patchthecve.com/cve/CVE-2024-54383.html</guid><pubDate>Wed, 17 Jun 2026 08:10:14 +0000</pubDate><description>CRITICAL 9.8: Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through &lt; 4.9.9.</description></item><item><title>CVE-2024-39650: Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not</title><link>https://patchthecve.com/cve/CVE-2024-39650.html</link><guid>https://patchthecve.com/cve/CVE-2024-39650.html</guid><pubDate>Wed, 17 Jun 2026 07:42:23 +0000</pubDate><description>HIGH 7.3: Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4.</description></item><item><title>CVE-2024-39651: Improper Limitation of a Pathname to a Restricted Directory (&#x27;Path Traversal&#x27;) vulnerability in WPWeb WooComme</title><link>https://patchthecve.com/cve/CVE-2024-39651.html</link><guid>https://patchthecve.com/cve/CVE-2024-39651.html</guid><pubDate>Wed, 17 Jun 2026 07:42:23 +0000</pubDate><description>HIGH 8.6: Improper Limitation of a Pathname to a Restricted Directory (&#x27;Path Traversal&#x27;) vulnerability in WPWeb WooCommerce PDF Vouchers allows File Manipulation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.</description></item><item><title>CVE-2024-39652: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in W</title><link>https://patchthecve.com/cve/CVE-2024-39652.html</link><guid>https://patchthecve.com/cve/CVE-2024-39652.html</guid><pubDate>Wed, 17 Jun 2026 07:42:23 +0000</pubDate><description>HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Reflected XSS.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.5.</description></item></channel></rss>