pdf_invoice_for_woocommerce_+_drag_and_drop_template_builder vulnerabilities

CVEs whose affected-version data names the pdf_invoice_for_woocommerce_+_drag_and_drop_template_builder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109220Critical· 9.8

1w ago

PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field

The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.1.1 via the 'customer_note' parameter parameter. This is due to insuffici…

▾ Midnightaddonsorg · PDF Invoice for WooCommerce + Drag and Drop Template BuilderEPSS 0.52%via CVEORG