CVE WatchJul 21, 2026

CVE-2026-57393

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-p

CVSS

6.5

Medium

EPSS

0.3%

p19

KEV

—

Exploit Today

0-100

Published: Jul 13, 2026 · Last modified: Jul 21, 2026 · CWE-497

EPSS · 30d

0.3%EPSS · 30 days0.4%

2026-07-132026-07-21

Technical description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce PDF Invoice Builder: from n/a through <= 2.0.8.

Official references

patchstack.comhttps://patchstack.com/database/Wordpress/Plugin/woo-pdf-invoice-builder/vulnerability/wordpress-woocommerce-pdf-invoice-builder-plugin-2-0-8-sensitive-data-exposure-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-37507—

16.7%

——5HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon the information revealed.12h CVE-2026-105884.4 MED

5.0%

——2A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.5d CVE-2026-502946.2 MED

29.7%

——9Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.6d CVE-2026-619775.3 MED

9.7%

——3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetSearch jet-search allows Retrieve Embedded Sensitive Data.This issue affects JetSearch: from n/a through <= 3.6.1.2.8d CVE-2026-619765.3 MED

9.7%

——3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Retrieve Embedded Sensitive Data.This issue affects JetBlocks For Elementor: from n/a through <= 1.5.0.8d CVE-2026-619755.3 MED

9.7%

——3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Crocoblock JetReviews jet-reviews allows Retrieve Embedded Sensitive Data.This issue affects JetReviews: from n/a through <= 3.0.1.8d