PDF InvoiceX – PDF Invoice for WooCommerce Security & Risk Analysis

wordpress.org/plugins/pdf-invoicex

Generate and download PDF invoices for WooCommerce orders, with customizable settings, email attachments, and bulk generation.

70 active installs v1.0.0 PHP 7.4+ WP 6.0+ Updated Jun 26, 2025
billinge-commerceinvoicepdfwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is PDF InvoiceX – PDF Invoice for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

PDF InvoiceX – PDF Invoice for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9mo ago
Risk Assessment

The 'pdf-invoicex' v1.0.0 plugin exhibits a strong security posture based on the provided static analysis. It demonstrates excellent adherence to security best practices, with all identified entry points (AJAX handlers) protected by nonce and capability checks. The plugin also makes effective use of prepared statements for all its SQL queries and the vast majority of its output is properly escaped, significantly mitigating common web application vulnerabilities like SQL injection and cross-site scripting (XSS). The absence of any recorded vulnerabilities, including critical or high severity ones, further reinforces this positive assessment. The plugin's static analysis indicates a clean codebase with no critical or high severity taint flows, and a well-managed attack surface.

Vulnerabilities
None known

PDF InvoiceX – PDF Invoice for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

PDF InvoiceX – PDF Invoice for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
6 prepared
Unescaped Output
22
378 escaped
Nonce Checks
5
Capability Checks
4
File Operations
1
External Requests
0
Bundled Libraries
1

Bundled Libraries

TCPDF

SQL Query Safety

100% prepared6 total queries

Output Escaping

95% escaped400 total outputs
Data Flows
All sanitized

Data Flow Analysis

5 flows
handle_generate_pdf (includes\admin\class-pdf-invoicex-admin.php:76)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

PDF InvoiceX – PDF Invoice for WooCommerce Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_pdfinvx_generate_pdfincludes\admin\class-pdf-invoicex-admin.php:11
authwp_ajax_pdfinvx_download_pdfincludes\admin\class-pdf-invoicex-admin.php:12
authwp_ajax_pdfinvx_generate_pdfincludes\frontend\class-pdf-invoicex-frontend.php:22
noprivwp_ajax_pdfinvx_generate_pdfincludes\frontend\class-pdf-invoicex-frontend.php:23
WordPress Hooks 19
actionadmin_menuincludes\admin\class-pdf-invoicex-admin.php:7
actionadmin_enqueue_scriptsincludes\admin\class-pdf-invoicex-admin.php:8
filterwoocommerce_admin_order_actionsincludes\admin\class-pdf-invoicex-admin.php:9
actionadd_meta_boxesincludes\admin\class-pdf-invoicex-admin.php:10
filterbulk_actions-edit-shop_orderincludes\admin\class-pdf-invoicex-bulk.php:6
actionadmin_action_pdfinvx_bulk_generate_pdfincludes\admin\class-pdf-invoicex-bulk.php:7
actionadmin_initincludes\class-pdf-invoicex-settings.php:6
filterwoocommerce_email_attachmentsincludes\class-pdf-invoicex-settings.php:7
filterwoocommerce_my_account_my_orders_actionsincludes\frontend\class-pdf-invoicex-frontend.php:10
actioninitincludes\frontend\class-pdf-invoicex-frontend.php:13
filterquery_varsincludes\frontend\class-pdf-invoicex-frontend.php:16
actiontemplate_redirectincludes\frontend\class-pdf-invoicex-frontend.php:19
actionadmin_noticespdf-invoicex.php:23
actionplugins_loadedpdf-invoicex.php:58
actionadmin_noticespdf-invoicex.php:60
filterwoocommerce_email_attachmentspdf-invoicex.php:88
actionwp_enqueue_scriptspdf-invoicex.php:95
actionpdfinvx_before_pdf_renderpdf-invoicex.php:123
actioninitpdf-invoicex.php:126
Maintenance & Trust

PDF InvoiceX – PDF Invoice for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJun 26, 2025
PHP min version7.4
Downloads513

Community Trust

Rating0/100
Number of ratings0
Active installs70
Developer Profile

PDF InvoiceX – PDF Invoice for WooCommerce Developer Profile

Vishwas R

4 plugins · 70 total installs

93
trust score
Avg Security Score
98/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PDF InvoiceX – PDF Invoice for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pdf-invoicex/assets/css/templates/default.css/wp-content/plugins/pdf-invoicex/assets/css/templates/classic.css/wp-content/plugins/pdf-invoicex/assets/css/templates/modern.css/wp-content/plugins/pdf-invoicex/assets/css/templates/colorful.css/wp-content/plugins/pdf-invoicex/assets/css/frontend.css/wp-content/plugins/pdf-invoicex/assets/js/frontend.js/wp-content/plugins/pdf-invoicex/assets/css/fontawesome.min.css/wp-content/plugins/pdf-invoicex/assets/css/admin.css+1 more
Script Paths
/wp-content/plugins/pdf-invoicex/assets/js/frontend.js/wp-content/plugins/pdf-invoicex/assets/js/admin.js
Version Parameters
pdf-invoicex/assets/css/templates/default.css?ver=pdf-invoicex/assets/css/templates/classic.css?ver=pdf-invoicex/assets/css/templates/modern.css?ver=pdf-invoicex/assets/css/templates/colorful.css?ver=pdf-invoicex/assets/css/frontend.css?ver=pdf-invoicex/assets/js/frontend.js?ver=pdf-invoicex/assets/css/fontawesome.min.css?ver=pdf-invoicex/assets/css/admin.css?ver=pdf-invoicex/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
pdfinvx-adminpdfinvx-settings-pagepdf-generator-button
HTML Comments
<!-- Generated by PDF InvoiceX --><!-- PDF InvoiceX Settings Page --><!-- PDF InvoiceX Admin Notices -->
Data Attributes
data-pdfinvx-noncedata-pdfinvx-generate-urldata-pdfinvx-download-url
JS Globals
pdfInvoiceXAdmin
REST Endpoints
/wp-json/pdfinvoicex/v1/generate/wp-json/pdfinvoicex/v1/download
FAQ

Frequently Asked Questions about PDF InvoiceX – PDF Invoice for WooCommerce