Log in Start free

EDGARROJAS

Products

ProductCVEsExploitedLatest
PDF Builder for WooCommerce. Create invoices,packing slips and more8–Sep 19, 2026
Smart Forms – when you need more than just a contact form3–Oct 14, 2026
WooCommerce PDF Invoice Builder3–Jul 13, 2026
Extra Product Options Builder for WooCommerce2–Jul 13, 2026
Smart Forms2–Oct 6, 2026
PDF Builder for WPForms1–Aug 9, 2024
AIO Forms – Craft Complex Forms Easily1–Oct 24, 2025

Exploited and recent CVEs

  • CVE-2026-95816 High 7.2 Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter 0.4%
  • CVE-2026-32574 High 7.1 WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-11899 Medium 4.3 PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler 0.4%
  • CVE-2026-11496 Medium 6.5 Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure 0.5%
  • CVE-2026-57393 Medium 6.5 WordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2026-57390 Medium 6.5 WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.167 - Broken Access Control vulnerability 0.3%
  • CVE-2026-2022 Medium 4.3 Smart Forms <= 2.6.99 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure 0.3%
  • CVE-2025-64269 Medium 4.3 WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability 0.2%
  • CVE-2025-11889 High 7.2 AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import 0.7%
  • CVE-2025-53203 Medium 4.3 WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-5055 Medium 4.4 Smart Forms <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-49856 High 8.1 WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability 0.5%
  • CVE-2024-11276 Medium 6.1 PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-9214 Medium 6.1 Extra Product Options Builder for WooCommerce <= 1.2.133 - Unauthenticated Stored Cross-Site Scripting 0.4%
  • CVE-2024-7414 Medium 5.3 PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure 0.6%
  • CVE-2023-3764 Medium 4.3 WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save 0.3%
  • CVE-2023-4160 Medium 4.4 WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting 0.5%
  • CVE-2023-3677 High 8.8 WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export 0.8%
  • CVE-2023-4161 Medium 4.3 WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation 0.3%
  • CVE-2023-4245 Medium 4.3 WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure 0.5%