MatrixAddons

Products

ProductCVEsExploitedLatest
Easy Invoice3–Sep 17, 2026
Document Engine1–Sep 3, 2025
Easy Invoice – Invoice Generator, PDF Quotes & Payments1–Jul 9, 2026

Exploited and recent CVEs

  • CVE-2026-66676 Medium 5.3 WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability 0.3%
  • CVE-2026-9021 Medium 5.3 Easy Invoice <= 2.1.19 - Unauthenticated Arbitrary Quote Accept/Decline and Invoice Creation via easy_invoice_accept_quote / easy_invoice_decline_quote AJAX Actions 0.5%
  • CVE-2025-6324 High 7.1 WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-66115 Medium 6.6 WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-58640 Medium 6.5 WordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability 0.2%