Risk Profile
4.3
CVSS Score
Weakness
Missing Authorization
Researchers
daroo
Vulnerability Report
Plugin
Medium
Patch path listed
CVE-2025-69024
BizPrint <= 4.6.7 - Missing Authorization
The Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.6.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to perform an unauthorized action.
Quick Answer
CVE-2025-69024 is a medium severity with CVSS 4.3 Vulnerability issue affecting the Plugin Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More.. It affects Versions up to 4.6.7 and is fixed in 4.7.1.
Published
Dec 29, 2025
Last Updated
Jan 06, 2026
Slug
print-google-cloud-print-gcp-woocommerce
Patch Status
Patched release is available
Remediation
Update to version 4.7.1, or a newer patched version
Operator Briefing
CVE-2025-69024 is tracked for the Plugin Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. as medium severity with CVSS 4.3. The affected range is Versions up to 4.6.7. Update Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. to 4.7.1 or newer where that version is compatible with the site.
Issue Type
Vulnerability
Primary Fixed Version
4.7.1
Primary Affected Range
Versions up to 4.6.7
Tracking ID
CVE-2025-69024
Detailed Metadata
| Software Type | Plugin |
|---|---|
| Software Slug |
print-google-cloud-print-gcp-woocommerce
View on wordpress.org
|
| CVE | CVE-2025-69024 |
| Patched Versions |
4.7.1
|
| Affected Versions |
Versions up to 4.6.7
|
Related CVE Cluster
Related CVEs for Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More.
These internal links group the same WordPress plugin by CVE, issue type, severity, and patch status so operators and search engines can connect the full vulnerability cluster.
Medium
CVE-2024-29773
4.5.6
Mar 25, 2024
CVE-2024-29773 Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. Cross-Site Scripting
BizPrint <= 4.5.4 - Cross-Site Request Forgery to Cross-Site Scripting via process.php
Medium
CVE-2024-32777
4.5.4
Apr 22, 2024
CVE-2024-32777 Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. Vulnerability
BizPrint <= 4.3.39 - Missing Authorization via showTemplatePreview()
Medium
4.5.4
Jan 30, 2024
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. Vulnerability
BizPrint <= 4.5.1 - Missing Authorization in showTemplatePreview
Medium
4.5.4
Jan 30, 2024
Print Anywhere & Create PDFs of Order Receipts, Invoices, Labels & More. Cross-Site Request Forgery
BizPrint <= 4.5.1 - Cross-Site Request Forgery in Printer Management
Licensing Notices
This record contains material that is subject to copyright
DEFIANT
Copyright 2012-2026 Defiant Inc.
License: Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Read more
MITRE
Copyright 1999-2026 The MITRE Corporation
License: CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Read more