Login Request a demo
IN
Product
InvoicePlane
by InvoicePlane · last CVE Oct 28, 2026
45
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 4High 14Medium 27Low 0
Severity
All severities45Critical4High14Medium27Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add InvoicePlane to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-67084
9.9
0%
Jan 15
File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely,…
Affected: before 1.6.4
CVE-2024-56975
9.8
1%
Mar 28
InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_file method of the Upload controller
Affected: before 1.6.2
CVE-2026-39353
9.1
0%
Sep 25
InvoicePlane: Remote Code Execution via Writable Templates Directory
Affected: < 1.7.2-rc-1
CVE-2026-25548
9.1
1%
Feb 18
InvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning
Affected: <= 1.7.0
Showing 4