Easy Invoice

easy-invoice · plugin

Known security vulnerabilities for Easy Invoice. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 critical · latest Sep 17, 2026

Vulnerabilities

CVE-2026-48836
WordPress Easy Invoice plugin <= 2.1.19 - Remote Code Execution (RCE) vulnerability
Critical 10.0
CVE-2025-6324
WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability
High 7.1
CVE-2025-66115
WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability
Medium 6.6
CVE-2026-66676
WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability
Medium 5.3
CVE-2026-9021
Easy Invoice <= 2.1.19 - Unauthenticated Arbitrary Quote Accept/Decline and Invoice Creation via easy_invoice_accept_quote / easy_invoice_decline_quote AJAX Act
Medium 5.3