edgarrojas
Web & CMS Pluginscommercial
Latest CVEs
The 14 most recently published vulnerabilities affecting edgarrojas.
- CVE-2026-2022Smart Forms <= 2.6.99 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure4.3
- CVE-2025-64269WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability4.3
- CVE-2025-11889AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import7.2
- CVE-2025-53203WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability4.3
- CVE-2025-5055Smart Forms <= 2.6.98 - Authenticated (Admin+) Stored Cross-Site Scripting4.4
- CVE-2023-49856WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability8.1
- CVE-2024-11276PDF Builder for WooCommerce. Create invoices,packing slips and more <= 1.2.136 - Reflected Cross-Site Scripting6.1
- CVE-2024-9214Extra Product Options Builder for WooCommerce <= 1.2.133 - Unauthenticated Stored Cross-Site Scripting6.1
- CVE-2024-7414PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure5.3
- CVE-2023-3764WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save4.3
- CVE-2023-4160WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting4.4
- CVE-2023-4161WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation4.3
- CVE-2023-3677WooCommerce PDF Invoice Builder <= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export8.8
- CVE-2023-4245WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure4.3