WordPress Critical · CVSS 9.8 CVE-2026-12416 June 24, 2026

Invoice Generator ≤ 1.0.0: security vulnerability

Invoice Generator ≤ 1.0.0

Security vulnerability in the Invoice Generator ≤ 1.0.0 component. Threat level: Critical (CVSS 9.8).

Worried this flaw is on your site? Check it for free in under a minute, or have us fix and secure it right away.

Who is affected

This vulnerability affects: Invoice Generator ≤ 1.0.0. If you use this component on your site, check the version and update it as soon as possible.

How dangerous

Rating: Critical, CVSS 9.8 out of 10. Critical flaws are often exploited en masse within hours of disclosure.

What to do

  • Update the vulnerable component (Invoice Generator ≤ 1.0.0) to the latest version.
  • If a patch is not out yet, temporarily disable the vulnerable element.
  • Check whether the site has already been attacked: unusual files, new administrator accounts, redirects.
  • Make a backup before you start making changes.
Do not guess, check

Does this flaw affect your site?

We will run a free audit: we check versions, plugins, and configuration, and tell you plainly whether you are safe.

Request a free audit →

Other current WordPress threats

MemberDash: security vulnerability CVE-2026-16310 · Critical HivePress Authentication: authentication bypass CVE-2026-18056 · High Frontend Admin by DynamiApps: authentication bypass CVE-2026-75816 · Critical SureCart WordPress: security vulnerability CVE-2026-18480 · High See the full list →