Threats tagged 'ghsa-5f8r-hw67-6cx4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2026-109220The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Critical9.82026-10-31GCVE DatabaseCVE-2026-109220 The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress contains a critical PHP Object Injection vulnerability in all versions up to and including 7.1.1. This flaw arises from insufficient sanitization of the 'customer_note' checkout field, allowing unauthenticated attackers to execute arbitrary code on the server by exploiting the invoice generation process triggered during checkout. Report on CVE-2026-109220 Vulnerability CWE-502 #ghsa-5f8r-hw67-6cx4	GCVE Database	2026-10-31

Page 1 of 1