Back to the CVE list

CVE-2026-11496

Woo PDF Invoice Builder <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference to Sensitive Order Information Disclosure

CVSS score

6.5

EPSS probability

%0.3

Risk score

0.0

Published

1 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

7.2

CVE-2026-95816Smart Forms <= 2.6.104 - Unauthenticated Stored Cross-Site Scripting via 'formString' Parameter

Vendoredgarrojas ProductSmart Forms – when you need more than just a contact form

Patch status unknownEPSS %05 d ago

7.1

CVE-2026-32574WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability

Vendoredgarrojas ProductSmart Forms

Patch status unknownEPSS %013 d ago

4.3

CVE-2026-11899PDF Builder for WooCommerce. Create invoices,packing slips and more <= 2.0.11 - Missing Authorization to Authenticated (Subscriber+) Sensitive Invoice Data Disclosure via GetInvoiceDetail AJAX Handler

Vendoredgarrojas ProductPDF Builder for WooCommerce. Create invoices,packing slips and more

Patch status unknownEPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-11496"