Fattura24

Fattura24 has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Fattura24 has a vendor fix available, so running the current release closes it.

All of these findings were reported by Enrico Marcolini. Fattura24 is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Fattura24 vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2023-5211

Fattura24 <= 6.2.7 - Reflected Cross-Site Scripting via 'id'

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv8.1.15
4.9(96)
98/100
Last Updated
2026-09-01 (12d ago)
Active Installs
400+
Downloads
64,892
Requires WP
4.6+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2019-05-20 (7y ago)
Requires Plugins
woocommerce

The official Fattura24 plugin allows the creation of electronic invoices, orders, traditional invoices and receipts via Fattura24 You can also analyze the progress of your business by graphic reports and share everything with your accountant. You can hook one or more eCommerce to your Fattura24 account and on each one create documents with different issue counters. By the plugin you can: Add the PEC and SDI Code fields on the check-out page; Add the fields “Tax code” and “VAT number” of the customer on the check-out page and decide if the fields have to be required; Create a copy of the order from WooCommerce to Fattura24; Send an automatic email to the customer with a PDF copy of the order or invoice attached; Add the customer information to your Fattura24 address book or update the data if they have already been created; Create the receipt/invoice – in your Fattura24 account – relating to the order and download it to your e-commerce so that it can be displayed both by the administrator and the customer. The system will create an invoice if the customer has filled out the VAT number field, otherwise a receipt, or you can choose to create the invoice always; Load stocks in Fattura24, pledge the goods with orders and unload them with invoices; Choose the template to create PDF copies of orders and receipts / electronic invoices / invoices; Associate the current-account balance for each invoice and analyze the details through the Fattura24 graphic reports; Set a custom issue counter for the invoices.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C