Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-68988 EUVD-2025-205748GHSA-44r9-xqhr-r952

WordPress E-Invoice App Malaysia plugin <= 1.3.0 - Sensitive Data Exposure vulnerability

Published Dec 30, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in o2oe E-Invoice App Malaysia einvoiceapp-malaysia allows Retrieve Embedded Sensitive Data.This issue affects E-Invoice App Malaysia: from n/a through <= 1.3.0.

Affected products

VendorProductAffectedFixed
o2oe E-Invoice App Malaysia ≤ 1.3.0 —

References