WordPress plugin
PDF Builder for WooCommerce. Create invoices,packing slips and more security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 14 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium12
- Low0
All PDF Builder for WooCommerce. Create invoices,packing slips and more vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler ≤2.0.11Update to 2.0.12 | CVE-2026-11899 | |
| Medium6.5 | Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure ≤2.0.8Update to 2.0.9 | CVE-2026-11496 | |
| Medium4.3 | Authenticated (Subscriber+) Sensitive Information Exposure ≤2.0.8Update to 2.0.9 | CVE-2026-57393 | |
| High8.8 | Authenticated (Subscriber+) Remote Code Execution ≤2.0.8Update to 2.0.9 | CVE-2026-52704 | |
| Medium4.3 | Missing Authorization ≤1.2.150Update to 1.2.151 | CVE-2025-64269 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.2.148Update to 1.2.149 | CVE-2025-53203 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.136Update to 1.2.137 | CVE-2024-11276 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.2.101Update to 1.2.102 | CVE-2023-51486 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.103Update to 1.2.104 | CVE-2023-46076 | |
| Medium4.3 | Missing Authorization to Sensitive Information Exposure ≤1.2.91Update to 1.2.92 | CVE-2023-4245 | |
| Medium4.4 | Authenticated (Administrator+) Cross-Site Scripting ≤1.2.90Update to 1.2.91 | CVE-2023-4160 | |
| Medium4.3 | Cross-Site Request Forgery to Custom Field Creation ≤1.2.90Update to 1.2.91 | CVE-2023-4161 | |
| Medium4.3 | Cross-Site Request Forgery via Save ≤1.2.90Update to 1.2.91 | CVE-2023-3764 | |
| High8.8 | Authenticated (Subscriber+) SQL Injection via Export ≤1.2.89Update to 1.2.90 | CVE-2023-3677 |
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler
≤2.0.11Update to 2.0.12
- Medium6.5Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure
≤2.0.8Update to 2.0.9
- Medium4.3Authenticated (Subscriber+) Sensitive Information Exposure
≤2.0.8Update to 2.0.9
- High8.8Authenticated (Subscriber+) Remote Code Execution
≤2.0.8Update to 2.0.9
- Medium4.3Missing Authorization
≤1.2.150Update to 1.2.151
- Medium4.3Cross-Site Request Forgery
≤1.2.148Update to 1.2.149
- Medium6.1Reflected Cross-Site Scripting
≤1.2.136Update to 1.2.137
- Medium4.3Cross-Site Request Forgery
≤1.2.101Update to 1.2.102
- Medium6.1Reflected Cross-Site Scripting
≤1.2.103Update to 1.2.104
- Medium4.3Missing Authorization to Sensitive Information Exposure
≤1.2.91Update to 1.2.92
- Medium4.4Authenticated (Administrator+) Cross-Site Scripting
≤1.2.90Update to 1.2.91
- Medium4.3Cross-Site Request Forgery to Custom Field Creation
≤1.2.90Update to 1.2.91
- Medium4.3Cross-Site Request Forgery via Save
≤1.2.90Update to 1.2.91
- High8.8Authenticated (Subscriber+) SQL Injection via Export
≤1.2.89Update to 1.2.90
PDF Builder for WooCommerce. Create invoices,packing slips and more: common questions
Does PDF Builder for WooCommerce. Create invoices,packing slips and more have known vulnerabilities?
Yes. VulnCrest Radar lists 14 known vulnerabilities in PDF Builder for WooCommerce. Create invoices,packing slips and more: 2 high, 12 medium. None are known to affect version null.
How do I check which version of PDF Builder for WooCommerce. Create invoices,packing slips and more I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PDF Builder for WooCommerce. Create invoices,packing slips and more vulnerability?
CVE-2026-11899, published Sep 18, 2026: PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler. Severity: Medium (CVSS 4.3).
Is any PDF Builder for WooCommerce. Create invoices,packing slips and more vulnerability listed in CISA KEV?
No. None of the known PDF Builder for WooCommerce. Create invoices,packing slips and more vulnerabilities is currently listed in the CISA KEV catalog.