Lucene search
+L

1857 matches found

Patchstack
Patchstack
added 2025/12/24 7:03 a.m.12 views

WordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by WordFence in WordPress Plugin Print Invoice & Delivery Notes for WooCommerce versions = 5.8.0...

9.8CVSS7.2AI score0.03766EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/12/24 5:16 a.m.12 views

CVE-2025-13773

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS0.03766EPSS
SaveExploits0References7
CVE
CVE
added 2025/12/24 4:32 a.m.33 views

CVE-2025-13773

The WordPress plugin Print Invoice & Delivery Notes for WooCommerce (

9.8CVSS6.5AI score0.03766EPSS
SaveIn wildExploits0References7
Cvelist
Cvelist
added 2025/12/24 4:32 a.m.34 views

CVE-2025-13773 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS0.03766EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/12/24 4:32 a.m.6 views

CVE-2025-13773 Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Execution

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS6.5AI score0.03766EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Print Invoice & Delivery Notes for WooCommerce 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

9.8CVSS8AI score0.03766EPSS
SaveExploits0References8
VulnCheck KEV
VulnCheck KEV
added 2025/12/24 12:00 a.m.10 views

VulnCheck KEV: CVE-2025-13773

The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...

9.8CVSS6.1AI score0.03766EPSS
SaveIn wildExploits0References2
Patchstack
Patchstack
added 2025/12/21 1:29 a.m.9 views

WordPress E-Invoice App Malaysia plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Rapid0nion in WordPress Plugin E-Invoice App Malaysia versions = 1.3.0...

7.5CVSS7AI score0.00266EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/20 11:32 p.m.4 views

CVE-2025-14989 Campcodes Complete Online Beauty Parlor Management System search-invoices.php sql injection

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/search-invoices.php. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

7.5CVSS7.3AI score0.00371EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.10 views

CVE-2025-6324

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Easy Invoice easy-invoice allows DOM-Based XSS.This issue affects Easy Invoice: from n/a through = 2.0.9...

7.1CVSS6.4AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.11 views

CVE-2025-60083

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS5.9AI score0.00421EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.6 views

EUVD-2025-204093

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Easy Invoice easy-invoice allows DOM-Based XSS.This issue affects Easy Invoice: from n/a through = 2.0.9...

7.1CVSS5.9AI score0.00174EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/18 9:30 a.m.11 views

EUVD-2025-204105

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.3.2...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 8:16 a.m.9 views

CVE-2025-6324

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Easy Invoice easy-invoice allows DOM-Based XSS.This issue affects Easy Invoice: from n/a through = 2.0.9...

7.1CVSS0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.13 views

CVE-2025-60083

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.33 views

CVE-2025-6324 WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Easy Invoice easy-invoice allows DOM-Based XSS.This issue affects Easy Invoice: from n/a through = 2.0.9...

7.1CVSS0.00174EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.20 views

CVE-2025-6324

CVE-2025-6324 concerns a DOM-based XSS in the WordPress plugin “Easy Invoice” (MatrixAddons Easy Invoice), affecting versions from unknown start through 2.0.9. The vulnerability is described as improper neutralization of input during web page generation, enabling cross-site scripting. Multiple co...

7.1CVSS6AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.0 views

CVE-2025-6324 WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MatrixAddons Easy Invoice easy-invoice allows DOM-Based XSS.This issue affects Easy Invoice: from n/a through = 2.0.9...

7.1CVSS5.4AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.4 views

CVE-2025-60083 WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS5.9AI score0.00421EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.36 views

CVE-2025-60083 WordPress PDF Invoice Builder for WooCommerce plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through = 6.5.0...

8.8CVSS0.00421EPSS
SaveExploits0References1
Rows per page
Query Builder