Teerachai S

**Name of the Vulnerable Software and Affected Versions** Invoct – PDF Invoices & Billing for WooCommerce versions up to and including 1.6 **Description** The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress has a flaw that allows unauthorized access to data. This is due to a missing capability check in multiple functions. Authenticated attackers with Subscriber-level access or higher can retrieve invoice clients, invoice items, and a list of WordPress users along with their email addresses. **Recommendations** Update Invoct – PDF Invoices & Billing for WooCommerce to a version newer than 1.6.