edgarrojas vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 20244
3. 20254
4. 20267

Newest CVEs

• CVE-2026-95816

  Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter

  edgarrojas · Smart Forms – when you need more than just a contact form

  High7.2
• CVE-2026-32574

  WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

  EDGARROJAS · Smart Forms

  High7.1
• CVE-2026-11899

  PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler

  edgarrojas · PDF Builder for WooCommerce. Create invoices,packing slips and more

  Medium4.3
• CVE-2026-11496

  Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure

  edgarrojas · PDF Builder for WooCommerce. Create invoices,packing slips and more

  Medium6.5
• CVE-2026-57393

  WordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Sensitive Data Exposure vulnerability

  EDGARROJAS · WooCommerce PDF Invoice Builder

  Medium6.5
• CVE-2026-57390

  WordPress Extra Product Options Builder for WooCommerce plugin <= 1.2.167 - Broken Access Control vulnerability

  EDGARROJAS · Extra Product Options Builder for WooCommerce

  Medium6.5
• CVE-2026-2022

  Smart Forms <= 2.6.99 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure

  edgarrojas · Smart Forms – when you need more than just a contact form

  Medium4.3
• CVE-2025-64269

  WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.150 - Broken Access Control vulnerability

  EDGARROJAS · WooCommerce PDF Invoice Builder

  Medium4.3
• CVE-2025-11889

  AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import

  edgarrojas · AIO Forms – Craft Complex Forms Easily

  High7.2
• CVE-2025-53203

  WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability

  EDGARROJAS · WooCommerce PDF Invoice Builder

  Medium4.3