Approved changes feed: RSS · Atom

cpe:2.3:a:matrixaddons:easy_invoice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMatrixaddons (379f4812-0d79-59a3-b064-61fa1d35cfdd)
ProductEasy Invoice (fdd80291-eb7e-5008-9bb7-70088dc78049)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6324 vulnerable 2026-06-08 07:43:14.831058 WordPress Easy Invoice plugin <= 2.0.9 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MatrixAddons Easy Invoice easy-invoice allows DOM-Based XSS.This issue affects Easy Invoice: from n/a through <= 2.0.9.
Published: 2025-12-18T07:22:09.770Z
Updated: 2026-04-28T18:21:54.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66115 vulnerable 2026-06-08 07:39:21.246678 WordPress Easy Invoice plugin <= 2.1.4 - Local File Inclusion vulnerability
MEDIUM (6.6)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in MatrixAddons Easy Invoice easy-invoice allows PHP Local File Inclusion.This issue affects Easy Invoice: from n/a through <= 2.1.4.
Published: 2025-11-21T12:30:06.442Z
Updated: 2026-04-28T16:14:17.199Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.