CVE-2026-52704

CRITICAL

Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issue affects WooCommerce PDF Invoice Builder: from n/a through 2.0.8.

StatusDeferred

설명

Improper Control of Generation of Code ('Code Injection') vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion.

This issue affects WooCommerce PDF Invoice Builder: from n/a through 2.0.8.

Score Summary

CVSS Score: 10.0
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 100.00
Exploitation signal(No additional exploitation signal) ×1.00
VPI 100.00
VPI formula vpi-v1
EPSS: 0.3%
(상위 23.4%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Changed
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 06/15/2026(last month)
Modified: 06/15/2026(last month)
Source: NVD

CWE Weakness Classification

CWE-94
NVD
Primary

References (1)

NVD
https://patchstack.com/database/wordpress/plugin/woo-pdf-invoice-builder/vulnerability/wordpress-woocommerce-pdf-invoice-builder-plugin-2-0-8-remote-code-execution-rce-vulnerability?_s_id=cve

목록으로

Dashboard

Vulnerabilities

Impact	100.00
Exploitation signal(No additional exploitation signal)	×1.00
VPI	100.00