Medium
CVE-2026-11899
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Medium
CVE-2026-11496
Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure
Medium
CVE-2026-57393
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure
High
CVE-2026-52704
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.8 - Authenticated (Subscriber+) Remote Code Execution
Medium
CVE-2025-64269
WooCommerce PDF Invoice Builder <= 1.2.150 - Missing Authorization
Medium
CVE-2025-53203
WooCommerce PDF Invoice Builder <= 1.2.148 - Cross-Site Request Forgery
Medium
CVE-2024-11276
PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting
Medium
CVE-2023-51486
WooCommerce PDF Invoice Builder <= 1.2.101 - Cross-Site Request Forgery
Medium
CVE-2023-46076
WooCommerce PDF Invoice Builder <= 1.2.103 - Reflected Cross-Site Scripting
Medium
CVE-2023-4160
WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-4245
WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2023-4161
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation
Medium
CVE-2023-3764
WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
High
CVE-2023-3677
WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.