Lucene search
+L

7 matches found

NVD
NVD
•added 2026/02/11 9:15 a.m.•31 views

CVE-2026-1748

The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS0.00348EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/02/11 8:26 a.m.•61 views

CVE-2026-1748 Invoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS0.00348EPSS
SaveExploits0References6
CVE
CVE
•added 2026/02/11 8:26 a.m.•53 views

CVE-2026-1748

CVE-2026-1748 details a data-exposure vulnerability in the Invoct – PDF Invoices & Billing for WooCommerce WordPress plugin. All versions up to and including 1.6 lack a capability check, enabling authenticated users with Subscriber-level access or higher to retrieve invoice clients, invoice items...

4.3CVSS5.7AI score0.00348EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/02/11 8:26 a.m.•6 views

CVE-2026-1748 Invoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information Exposure

The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS5.7AI score0.00348EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/02/11 8:26 a.m.•9 views

CVE-2026-1748

The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS5.5AI score0.00348EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•22 views

WordPress plugin Invoct – PDF Invoices & Billing for WooCommerce has a security vulnerability.

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

4.3CVSS5.8AI score0.00348EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/02/11 12:00 a.m.•38 views

PT-2026-7497

The Invoct – PDF Invoices & Billing for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access...

4.3CVSS5.5AI score0.00348EPSS
SaveExploits0References6
Rows per page
Query Builder