Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

PDF Invoices & Packing Slips for WooCommerce – Challan Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 3 vulnerability records associated with PDF Invoices & Packing Slips for WooCommerce – Challan, published between 2022 and 2025.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

3Total records
0Critical
1High
2Medium
0Low
0Informational
3Patched records
0Currently marked unpatched
2022-12-14First disclosure
2025-05-07Latest disclosure
2 of 3CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202222 records
202511 records

Severity Breakdown

SeverityRecordsShare
High133.3%
Medium266.7%

Vulnerability-Type Breakdown

CSRF

2 records66.7%

First: 2022. Latest: 2025.

Missing Authorization

1 record33.3%

First: 2022. Latest: 2022.

Patch Status

Patched
3
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 3.7.59
  • 3.4.9

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-3.7.58Challan <= 3.7.58 - Cross-Site Request Forgery to Arbitrary Options UpdateMay 7, 20253.7.59High
*-3.4.8Appsero <= 1.2.1 - Missing AuthorizationDecember 16, 20223.4.9Medium
*-3.4.8Appsero <= 1.2.0 - Cross-Site Request ForgeryDecember 14, 20223.4.9Medium

Selected source records

Latest Records

HighCVE-2025-47462

Challan <= 3.7.58 - Cross-Site Request Forgery to Arbitrary Options Update

Published: May 7, 2025

Affected versions
*-3.7.58
Patched versions
3.7.59
Original Wordfence record
Medium

Appsero <= 1.2.1 - Missing Authorization

Published: December 16, 2022

Affected versions
*-2.2
Patched versions
Not supplied
Affected versions
*-10.37
Patched versions
10.38
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.4.2
Patched versions
1.5.0
Affected versions
*-1.14
Patched versions
1.14.1
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-2.12.14
Patched versions
2.12.15
Affected versions
*-1.6.3
Patched versions
1.6.4
Affected versions
*-1.2.3
Patched versions
1.2.4
Affected versions
*-1.9.3
Patched versions
1.9.4
Affected versions
*-2.2.6
Patched versions
2.2.7
Affected versions
*-4.1.2
Patched versions
4.1.3
Affected versions
*-2.6.12
Patched versions
2.6.13
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-3.0.4
Patched versions
3.0.5
Affected versions
*-5.4.6
Patched versions
5.4.7
Affected versions
*-7.3.6
Patched versions
7.3.7
Affected versions
*-3.28.0
Patched versions
3.28.1
Affected versions
*-4.1.5
Patched versions
4.1.6
Affected versions
*-1.2.5
Patched versions
2.0.0
Affected versions
*-2.4.2
Patched versions
2.4.3
Affected versions
*-1.14.1
Patched versions
1.14.2
Affected versions
*-1.7.1
Patched versions
1.7.2
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-3.8.2
Patched versions
3.8.3
Affected versions
*-8.2.5
Patched versions
8.2.6
Affected versions
*-2.0.10
Patched versions
2.0.11
Affected versions
*-1.9.7
Patched versions
1.9.8
Affected versions
*-1.0.9
Patched versions
1.1.0
Affected versions
1.6-1.7.5
Patched versions
1.7.6
Affected versions
*-2.0.6
Patched versions
2.0.7
Affected versions
*-1.1.1
Patched versions
1.1.2
Affected versions
*-2.3.3
Patched versions
2.3.4
Affected versions
*-3.4.8
Patched versions
3.4.9
Affected versions
*-2.1.1
Patched versions
2.1.2
Affected versions
*-1.2.4
Patched versions
Not supplied
Affected versions
*-1.2.19
Patched versions
1.2.20
Affected versions
*-2.4.3
Patched versions
Not supplied
Affected versions
*-1.2.15
Patched versions
1.2.16
Affected versions
*-1.6.2
Patched versions
1.6.3
Affected versions
1.10.5
Patched versions
1.11.0
Affected versions
*-7.7.1
Patched versions
7.7.2
Affected versions
*-3.6.0
Patched versions
3.6.1
Affected versions
*-2.6.1
Patched versions
2.6.2
Affected versions
*-1.2.8
Patched versions
1.2.9
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.5.8
Patched versions
1.5.9
Affected versions
*-1.7.30
Patched versions
1.7.31
Affected versions
*-1.0.1
Patched versions
1.0.2
Affected versions
*-1.4.96
Patched versions
1.4.97
Affected versions
*-3.1.3
Patched versions
3.1.4
Affected versions
*-2.6.4
Patched versions
2.6.5
Affected versions
*-1.1.9
Patched versions
2.0.0
Original Wordfence record
MediumCVE-2022-47150

Appsero <= 1.2.0 - Cross-Site Request Forgery

Published: December 14, 2022

Affected versions
*-2.2
Patched versions
Not supplied
Affected versions
*-10.37
Patched versions
10.38
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.4.2
Patched versions
1.5.0
Affected versions
*-1.14
Patched versions
1.14.1
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-2.12.14
Patched versions
2.12.15
Affected versions
*-1.6.3
Patched versions
1.6.4
Affected versions
*-1.2.3
Patched versions
1.2.4
Affected versions
*-1.9.3
Patched versions
1.9.4
Affected versions
*-2.2.6
Patched versions
2.2.7
Affected versions
*-4.1.2
Patched versions
4.1.3
Affected versions
*-2.6.12
Patched versions
2.6.13
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-3.0.4
Patched versions
3.0.5
Affected versions
*-5.4.6
Patched versions
5.4.7
Affected versions
*-7.3.6
Patched versions
7.3.7
Affected versions
*-3.28.0
Patched versions
3.28.1
Affected versions
*-4.1.5
Patched versions
4.1.6
Affected versions
*-1.2.5
Patched versions
2.0.0
Affected versions
*-2.4.2
Patched versions
2.4.3
Affected versions
*-1.14.1
Patched versions
1.14.2
Affected versions
*-1.7.1
Patched versions
1.7.2
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-3.8.2
Patched versions
3.8.3
Affected versions
*-8.2.5
Patched versions
8.2.6
Affected versions
*-2.0.10
Patched versions
2.0.11
Affected versions
*-1.9.7
Patched versions
1.9.8
Affected versions
*-1.0.9
Patched versions
1.1.0
Affected versions
1.6-1.7.5
Patched versions
1.7.6
Affected versions
*-2.0.6
Patched versions
2.0.7
Affected versions
*-1.1.1
Patched versions
1.1.2
Affected versions
*-2.3.3
Patched versions
2.3.4
Affected versions
*-3.4.8
Patched versions
3.4.9
Affected versions
*-2.1.1
Patched versions
2.1.2
Affected versions
*-1.2.4
Patched versions
Not supplied
Affected versions
*-1.2.19
Patched versions
1.2.20
Affected versions
*-2.4.3
Patched versions
Not supplied
Affected versions
*-1.2.15
Patched versions
1.2.16
Affected versions
*-1.6.2
Patched versions
1.6.3
Affected versions
*-1.10.5
Patched versions
1.11.0
Affected versions
*-7.7.1
Patched versions
7.7.2
Affected versions
*-3.6.0
Patched versions
3.6.1
Affected versions
*-1.0.6
Patched versions
2.0.0
Affected versions
*-2.6.1
Patched versions
2.6.2
Affected versions
*-1.2.8
Patched versions
1.2.9
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.5.8
Patched versions
1.5.9
Affected versions
*-1.7.30
Patched versions
1.7.31
Affected versions
*-1.0.1
Patched versions
1.0.2
Affected versions
*-1.4.96
Patched versions
1.4.97
Affected versions
*-3.1.3
Patched versions
3.1.4
Affected versions
2.6.4
Patched versions
2.6.5
Affected versions
*-1.1.9
Patched versions
2.0.0
Original Wordfence record

Highest-Severity Records

HighCVE-2025-47462

Challan <= 3.7.58 - Cross-Site Request Forgery to Arbitrary Options Update

Published: May 7, 2025

Affected versions
*-3.7.58
Patched versions
3.7.59
Original Wordfence record
Medium

Appsero <= 1.2.1 - Missing Authorization

Published: December 16, 2022

Affected versions
*-2.2
Patched versions
Not supplied
Affected versions
*-10.37
Patched versions
10.38
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.4.2
Patched versions
1.5.0
Affected versions
*-1.14
Patched versions
1.14.1
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-2.12.14
Patched versions
2.12.15
Affected versions
*-1.6.3
Patched versions
1.6.4
Affected versions
*-1.2.3
Patched versions
1.2.4
Affected versions
*-1.9.3
Patched versions
1.9.4
Affected versions
*-2.2.6
Patched versions
2.2.7
Affected versions
*-4.1.2
Patched versions
4.1.3
Affected versions
*-2.6.12
Patched versions
2.6.13
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-3.0.4
Patched versions
3.0.5
Affected versions
*-5.4.6
Patched versions
5.4.7
Affected versions
*-7.3.6
Patched versions
7.3.7
Affected versions
*-3.28.0
Patched versions
3.28.1
Affected versions
*-4.1.5
Patched versions
4.1.6
Affected versions
*-1.2.5
Patched versions
2.0.0
Affected versions
*-2.4.2
Patched versions
2.4.3
Affected versions
*-1.14.1
Patched versions
1.14.2
Affected versions
*-1.7.1
Patched versions
1.7.2
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-3.8.2
Patched versions
3.8.3
Affected versions
*-8.2.5
Patched versions
8.2.6
Affected versions
*-2.0.10
Patched versions
2.0.11
Affected versions
*-1.9.7
Patched versions
1.9.8
Affected versions
*-1.0.9
Patched versions
1.1.0
Affected versions
1.6-1.7.5
Patched versions
1.7.6
Affected versions
*-2.0.6
Patched versions
2.0.7
Affected versions
*-1.1.1
Patched versions
1.1.2
Affected versions
*-2.3.3
Patched versions
2.3.4
Affected versions
*-3.4.8
Patched versions
3.4.9
Affected versions
*-2.1.1
Patched versions
2.1.2
Affected versions
*-1.2.4
Patched versions
Not supplied
Affected versions
*-1.2.19
Patched versions
1.2.20
Affected versions
*-2.4.3
Patched versions
Not supplied
Affected versions
*-1.2.15
Patched versions
1.2.16
Affected versions
*-1.6.2
Patched versions
1.6.3
Affected versions
1.10.5
Patched versions
1.11.0
Affected versions
*-7.7.1
Patched versions
7.7.2
Affected versions
*-3.6.0
Patched versions
3.6.1
Affected versions
*-2.6.1
Patched versions
2.6.2
Affected versions
*-1.2.8
Patched versions
1.2.9
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.5.8
Patched versions
1.5.9
Affected versions
*-1.7.30
Patched versions
1.7.31
Affected versions
*-1.0.1
Patched versions
1.0.2
Affected versions
*-1.4.96
Patched versions
1.4.97
Affected versions
*-3.1.3
Patched versions
3.1.4
Affected versions
*-2.6.4
Patched versions
2.6.5
Affected versions
*-1.1.9
Patched versions
2.0.0
Original Wordfence record
MediumCVE-2022-47150

Appsero <= 1.2.0 - Cross-Site Request Forgery

Published: December 14, 2022

Affected versions
*-2.2
Patched versions
Not supplied
Affected versions
*-10.37
Patched versions
10.38
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.4.2
Patched versions
1.5.0
Affected versions
*-1.14
Patched versions
1.14.1
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-2.12.14
Patched versions
2.12.15
Affected versions
*-1.6.3
Patched versions
1.6.4
Affected versions
*-1.2.3
Patched versions
1.2.4
Affected versions
*-1.9.3
Patched versions
1.9.4
Affected versions
*-2.2.6
Patched versions
2.2.7
Affected versions
*-4.1.2
Patched versions
4.1.3
Affected versions
*-2.6.12
Patched versions
2.6.13
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-3.0.4
Patched versions
3.0.5
Affected versions
*-5.4.6
Patched versions
5.4.7
Affected versions
*-7.3.6
Patched versions
7.3.7
Affected versions
*-3.28.0
Patched versions
3.28.1
Affected versions
*-4.1.5
Patched versions
4.1.6
Affected versions
*-1.2.5
Patched versions
2.0.0
Affected versions
*-2.4.2
Patched versions
2.4.3
Affected versions
*-1.14.1
Patched versions
1.14.2
Affected versions
*-1.7.1
Patched versions
1.7.2
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-3.8.2
Patched versions
3.8.3
Affected versions
*-8.2.5
Patched versions
8.2.6
Affected versions
*-2.0.10
Patched versions
2.0.11
Affected versions
*-1.9.7
Patched versions
1.9.8
Affected versions
*-1.0.9
Patched versions
1.1.0
Affected versions
1.6-1.7.5
Patched versions
1.7.6
Affected versions
*-2.0.6
Patched versions
2.0.7
Affected versions
*-1.1.1
Patched versions
1.1.2
Affected versions
*-2.3.3
Patched versions
2.3.4
Affected versions
*-3.4.8
Patched versions
3.4.9
Affected versions
*-2.1.1
Patched versions
2.1.2
Affected versions
*-1.2.4
Patched versions
Not supplied
Affected versions
*-1.2.19
Patched versions
1.2.20
Affected versions
*-2.4.3
Patched versions
Not supplied
Affected versions
*-1.2.15
Patched versions
1.2.16
Affected versions
*-1.6.2
Patched versions
1.6.3
Affected versions
*-1.10.5
Patched versions
1.11.0
Affected versions
*-7.7.1
Patched versions
7.7.2
Affected versions
*-3.6.0
Patched versions
3.6.1
Affected versions
*-1.0.6
Patched versions
2.0.0
Affected versions
*-2.6.1
Patched versions
2.6.2
Affected versions
*-1.2.8
Patched versions
1.2.9
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.5.8
Patched versions
1.5.9
Affected versions
*-1.7.30
Patched versions
1.7.31
Affected versions
*-1.0.1
Patched versions
1.0.2
Affected versions
*-1.4.96
Patched versions
1.4.97
Affected versions
*-3.1.3
Patched versions
3.1.4
Affected versions
2.6.4
Patched versions
2.6.5
Affected versions
*-1.1.9
Patched versions
2.0.0
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory