CVE-2026-1748

🗓️ 11 Feb 2026 08:26:26Reported by WordfenceType

Invoct WordPress plugin exposes invoices, items, and user emails to Subscriber or higher due to missing authorization.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-1748	11 Feb 202608:26	–	attackerkb
CNNVD	WordPress plugin Invoct – PDF Invoices & Billing for WooCommerce 安全漏洞	11 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-1748 Invoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure	11 Feb 202608:26	–	cvelist
NVD	CVE-2026-1748	11 Feb 202609:15	–	nvd
Patchstack	WordPress Invoct - PDF Invoices & Billing for WooCommerce plugin <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure vulnerability	10 Feb 202623:17	–	patchstack
Positive Technologies	PT-2026-7497	11 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1748	12 Feb 202613:43	–	redhatcve
Vulnrichment	CVE-2026-1748 Invoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure	11 Feb 202608:26	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 9, 2026 to February 15, 2026)	19 Feb 202618:42	–	wordfence

Vulners

Node

kirilkirkov invoct_pdf_invoices_&_billing_for_woocommerceRange≤1.6wordpress

[
  {
    "vendor": "kirilkirkov",
    "product": "Invoct – PDF Invoices & Billing for WooCommerce",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.6",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.7/KirilKirkovWpInvoices.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/79e4b7e1-9fff-4ff2-be2b-6dfa5f1ff48a
plugins	www.plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php
plugins	www.plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php
plugins	www.plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php
plugins	www.plugins.trac.wordpress.org/browser/kirilkirkov-pdf-invoice-manager/tags/1.6/KirilKirkovWpInvoices.php

15 Apr 2026 00:35Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.14.3

EPSS0.00016

SSVC

CWE-862