Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-11-03
Pdf For Woocommerce - Security Vulnerability (CVE-2026-109220)
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customer_note' parameter parameter. This is due to insufficient sanitization of the customer_note checkout field, which is inlined verbatim into invoice HTML, entity-decoded back into a live tag by simplehtmldom, reassembled into raw bytes by mPDF, and passed to unserialize() in _getObjAttr without validation. This makes it possible for unauthenticated attackers to execute code on the server. An unauthenticated attacker can…
PLUGIN
Pdf For Woocommerce
CVE-2026-109220
Risk Score
Threat Entry
Updated 2026-06-17
Pdf For Woocommerce - PHP Object Injection (CVE-2025-60083)
Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through
PLUGIN
Pdf For Woocommerce
CVE-2025-60083
Risk Score
Threat Entry
Updated 2026-06-17
Pdf For Woocommerce - SQL Injection (CVE-2025-47537)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows SQL Injection.This issue affects PDF Invoice Builder for WooCommerce: from n/a through
PLUGIN
Pdf For Woocommerce
CVE-2025-47537
Risk Score
Threat Entry
Updated 2026-06-17
Pdf For Woocommerce - Cross-Site Scripting (XSS) (CVE-2025-24755)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Stored XSS.This issue affects PDF Invoice Builder for WooCommerce: from n/a through
PLUGIN
Pdf For Woocommerce
CVE-2025-24755
Risk Score