← Back to browse
·
API
CVE-2026-48836
Severity
CRITICAL
CVSS
10.0
EPSS
0.00572
Risk score
40.2
CISA KEV
No
PoC
No
Published
2026-06-15
Modified
2026-06-16
First seen
2026-08-07
Aliases
EUVD-2026-36844, GHSA-JWWX-7M25-M3H7
Products
MatrixAddons:Easy Invoice n/a ≤2.1.19
Sources
euvd
EUVD-2026-36844
Description
Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36844
https://patchstack.com/database/wordpress/plugin/easy-invoice/vulnerability/wordpress-easy-invoice-plugin-2-1-19-remote-code-execution-rce-vulnerability?_s_id=cve