UpstreamscvelistV5 18:04ZCISA KEV 19:16ZVulnrichment 18:04ZNVD 18:04ZEPSS 19:16Zdaily run 06:06 UTC · next hourly 20:15

Sat 31 Oct 2026

Today

83 new ≥ 9.0 · 13 actionable · addonsorg clear

PriorityVulnerabilityCVSSEPSSSignals

addonsorg1 vulnerabilityMax CVSS 9.8Priority 38KEV 0

38

CVE-2026-109220

addonsorg PDF Invoice for WooCommerce + Drag and Drop Template Builder · PDF Invoice for WooCommerce + Drag and Drop Template Builder <= 7.1.1 - Unauthenticated PHP Object Injection to Remote Code Execution via 'customer_note' Checkout Field

9.80.5%

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works