Description
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MantraBrain | Easy Invoice | ≤ 2.1.19 | — |
Critical · 10.0
CVE-2026-48836
EUVD-2026-36844GHSA-jwwx-7m25-m3h7
WordPress Easy Invoice plugin <= 2.1.19 - Remote Code Execution (RCE) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack