MatrixAddons
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Easy Invoice | 3 | – | Sep 17, 2026 |
| Document Engine | 1 | – | Sep 3, 2025 |
| Easy Invoice – Invoice Generator, PDF Quotes & Payments | 1 | – | Jul 9, 2026 |
Exploited and recent CVEs
- CVE-2026-66676 WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability 0.3%
- CVE-2026-9021 Easy Invoice <= 2.1.19 - Unauthenticated Arbitrary Quote Accept/Decline and Invoice Creation via easy_invoice_accept_quote / easy_invoice_decline_quote AJAX Actions 0.5%
- CVE-2025-6324 WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-66115 WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability 0.4%
- CVE-2025-58640 WordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability 0.2%