What’s Vulnerable › Products

edgarrojas PDF Builder for WooCommerce. Create invoices,packing slips and more vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your edgarrojas PDF Builder for WooCommerce. Create invoices,packing slips and more version is affected

Latest edgarrojas PDF Builder for WooCommerce. Create invoices,packing slips and more vulnerabilities

• CVE-2026-11899 — PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler (CVSS 4.3)
• CVE-2026-11496 — Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure (CVSS 6.5)
• CVE-2026-57393 — WordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Sensitive Data Exposure vulnerability (CVSS 6.5)
• CVE-2025-64269 — WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-53203 — WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
• CVE-2024-11276 — PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-51486 — WordPress WooCommerce PDF Invoice Builder, Create invoices, packing slips and more plugin <= 1.2.101 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2023-46076 — WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-4245 — WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure (CVSS 4.3)
• CVE-2023-4161 — WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation (CVSS 4.3)
• CVE-2023-4160 — WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting (CVSS 4.8)
• CVE-2023-3764 — WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save (CVSS 4.3)
• CVE-2023-3677 — WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export (CVSS 8.8)