Skip to content
OpenAdvisories

Vendor

matrixaddons

5 known vulnerabilities.

Products

Easy Invoice 3 Document Engine 1 Easy Invoice – Invoice Generator, PDF Quotes & Payments 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-66676

    WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions.

    matrixaddons Easy Invoice
  • Medium 5.3
    CVE-2026-9021

    Easy Invoice <= 2.1.19 - Unauthenticated Arbitrary Quote Accept/Decline and Invoice Creation via easy_invoice_accept_quote / easy_invoice_decline_quote AJAX Actions

    The Easy Invoice plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.19. This is due to the plugin registering the easy_invoice_accept_quote and easy_invoice_decline_quote AJAX actions via wp_ajax_nopriv_ hooks an…

    matrixaddons Easy Invoice – Invoice Generator, PDF Quotes & Payments Web / CMS
  • Medium 6.6
    CVE-2025-66115

    WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MatrixAddons Easy Invoice easy-invoice allows PHP Local File Inclusion.This issue affects Easy Invoice: from n/a through <= 2.1.4.

    matrixaddons Easy Invoice
  • Medium 6.5
    CVE-2025-58640

    WordPress Document Engine Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MatrixAddons Document Engine document-engine allows Stored XSS.This issue affects Document Engine: from n/a through <= 1.2.

    matrixaddons Document Engine