Does Invoices for WooCommerce have any unpatched vulnerabilities?

No. All known vulnerabilities in Invoices for WooCommerce have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Invoices for WooCommerce compatible with WordPress 6.7.5?

According to WordPress.org data, Invoices for WooCommerce 3.2.1 has been tested up to WordPress 6.7.5. Check the plugin's changelog for the latest compatibility information.

Is Invoices for WooCommerce compatible with PHP 7.4+?

Invoices for WooCommerce requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Invoices for WooCommerce updated?

Invoices for WooCommerce was last updated on Feb 8, 2025. Frequent updates are generally a positive security signal.

What is Invoices for WooCommerce's security score?

Invoices for WooCommerce has a WP-Safety security score of 92/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Invoices for WooCommerce Security & Risk Analysis

wordpress.org/plugins/woocommerce-pdf-invoices

Automatically generate and attach customizable PDF Invoices and PDF Packing Slips for WooCommerce to emails.

10K active installs v3.2.1 PHP 7.4+ WP + Updated Feb 8, 2025

invoicespacking-slipspdf-invoiceswoocommerce

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Invoices for WooCommerce Safe to Use in 2026?

Generally Safe

Score 92/100

Invoices for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago

Risk Assessment

Based on the provided static analysis, the 'woocommerce-pdf-invoices' plugin v3.2.1 exhibits a strong security posture with several positive indicators. The complete absence of critical or high-severity vulnerabilities in its history, along with zero recorded CVEs, suggests a well-maintained and secure codebase over time. The static analysis further reinforces this, showing 100% of SQL queries are prepared, a significant 96% of outputs are properly escaped, and the presence of nonce and capability checks on its entry points. The absence of any taint analysis findings further contributes to this positive assessment.

Key Concerns

Bundled library (TCPDF) may have known vulnerabilities
5 file operations without context on sanitization

Vulnerabilities

None known

Invoices for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Invoices for WooCommerce Code Analysis

Dangerous Functions

Raw SQL Queries

10 prepared

Unescaped Output

338 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

TCPDF

SQL Query Safety

100% prepared10 total queries

Output Escaping

96% escaped351 total outputs

Attack Surface

Invoices for WooCommerce Attack Surface

Entry Points3

Unprotected0

AJAX Handlers 2

authwp_ajax_dismiss-noticeincludes\admin\class-admin-notices.php:27

authwp_ajax_deactivation-noticeincludes\admin\class-admin-notices.php:28

Shortcodes 1

[bewpi-download-invoice] includes\woocommerce-pdf-invoices.php:148

WordPress Hooks 25

actionadmin_initbootstrap.php:56

actionplugins_loadedbootstrap.php:60

actionadmin_enqueue_scriptsincludes\admin\class-admin-notices.php:24

actionadmin_initincludes\admin\class-admin-notices.php:25

actionadmin_noticesincludes\admin\class-admin-notices.php:26

actionadmin_noticesincludes\admin\class-admin-notices.php:29

actionwp_trash_postincludes\class-invoice.php:46

actionbefore_delete_postincludes\class-invoice.php:47

actionadmin_initincludes\class-packing-slip.php:36

actionwoocommerce_admin_order_actions_endincludes\class-packing-slip.php:43

actionadd_meta_boxesincludes\class-packing-slip.php:44

filterupload_dirincludes\woocommerce-pdf-invoices.php:80

actionwoocommerce_checkout_order_processedincludes\woocommerce-pdf-invoices.php:143

filterwoocommerce_email_headersincludes\woocommerce-pdf-invoices.php:146

filterwoocommerce_email_attachmentsincludes\woocommerce-pdf-invoices.php:147

actionadmin_initincludes\woocommerce-pdf-invoices.php:157

actionadmin_enqueue_scriptsincludes\woocommerce-pdf-invoices.php:158

actionadmin_enqueue_scriptsincludes\woocommerce-pdf-invoices.php:159

filterplugin_row_metaincludes\woocommerce-pdf-invoices.php:164

actionwoocommerce_admin_order_actions_endincludes\woocommerce-pdf-invoices.php:177

actionadd_meta_boxesincludes\woocommerce-pdf-invoices.php:178

filtermanage_edit-shop_order_columnsincludes\woocommerce-pdf-invoices.php:179

actionmanage_shop_order_posts_custom_columnincludes\woocommerce-pdf-invoices.php:180

actioninitincludes\woocommerce-pdf-invoices.php:187

filterwoocommerce_my_account_my_orders_actionsincludes\woocommerce-pdf-invoices.php:188

Maintenance & Trust

Invoices for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5

Last updatedFeb 8, 2025

PHP min version7.4

Downloads704K

Community Trust

Rating94/100

Number of ratings469

Active installs10K

Alternatives

Invoices for WooCommerce Alternatives

WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels

print-invoices-packing-slip-labels-for-woocommerce

Auto-generate and attach WooCommerce PDF invoices and packing slips to order emails with customizable templates & bulk print options.

60K 6 CVEs

WCPDF User Template

bvd-wcpdf-user-template

100

With this plugin you can change what PDF template will be used for a certain user. "WooCommerce PDF Invoices & Packing Slips" is the plu …

0 No CVEs

PDF Invoices & Packing Slips for WooCommerce

woocommerce-pdf-invoices-packing-slips

Create, print & automatically email PDF or XML Invoices & PDF Packing Slips for WooCommerce orders.

300K 12 CVEs

Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools

woocommerce-jetpack

Supercharge WooCommerce with FREE Abandoned Cart Recovery, Product Variation Swatches, PDF Invoices & 100+ tools. Boost sales & save time.

30K 31 CVEs

Flexible PDF Invoices for WooCommerce & WordPress

flexible-invoices

WooCommerce PDF invoices made simple. EU VAT validation, reverse charge invoice, proforma invoices, MOSS / OSS support, invoices in bulk and more.

7K 1 CVE

Developer Profile

Invoices for WooCommerce Developer Profile

Bas Elbers

1 plugin · 10K total installs

trust score

Avg Security Score

92/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Invoices for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/woocommerce-pdf-invoices/assets/css/admin-settings.css/wp-content/plugins/woocommerce-pdf-invoices/assets/css/admin-styles.css/wp-content/plugins/woocommerce-pdf-invoices/assets/js/admin-upload.js/wp-content/plugins/woocommerce-pdf-invoices/assets/js/admin-script.js

Script Paths

/wp-content/plugins/woocommerce-pdf-invoices/assets/js/admin-upload.js/wp-content/plugins/woocommerce-pdf-invoices/assets/js/admin-script.js

Version Parameters

woocommerce-pdf-invoices/assets/css/admin-settings.css?ver=woocommerce-pdf-invoices/assets/css/admin-styles.css?ver=woocommerce-pdf-invoices/assets/js/admin-upload.js?ver=woocommerce-pdf-invoices/assets/js/admin-script.js?ver=

HTML / DOM Fingerprints

CSS Classes

wpiwpi-debugwpi-debug-containerwpi-debug-field

HTML Comments

Main instance of BE_WooCommerce_PDF_Invoices.Settings class to return options.Option sections.Option fields.+21 more

Data Attributes

data-id="company_logo"data-type="text"data-target="company_logo_id"data-preview="company_logo_preview"

JS Globals

bewpiUploadwpi_admin_script

REST Endpoints

/wp-json/bewpi/v1/settings

FAQ