Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Easy Invoice – PDF Invoice Generator & Quote Builder 2.1.4

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 15, 2025

The Easy Invoice plugin for WordPress has a security issue in versions 2.1.4 and below. This means that hackers who have administrator-level access or higher can access and run any files they want on the server. This could lead to them getting sensitive information or running malicious code on the website.

Detected in:

Easy Invoice – PDF Invoice Generator & Quote Builder fixed vulnerable versions: >= * <= 2.1.4
Easy Invoice – Professional Invoice & Quote Generator fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.