WFatture for WooCommerce Fattureincloud
WFatture for WooCommerce Fattureincloud has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WFatture for WooCommerce Fattureincloud has a vendor fix available, so running the current release closes it.
All of these findings were reported by Nguyen Xuan Chien. WFatture for WooCommerce Fattureincloud is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-30837WooCommerce Fattureincloud <= 2.6.7 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
WFatture for WooCommerce Fattureincloud
Author
Cristiano Zanca
woocommerceThe WFatture for WooCommerce Fattureincloud plugin allows you to transform the orders received in your online store made with WooCommerce in Invoices on Fattureincloud.it Before installing it please read all the Documentation of WooCommerce Fattureincloud Features The Free Version manages the last 10 orders and IVA at 0 and 22% The Premium Version manages all orders and all kind of IVA More detailed info here – Qui la Documentazione Try Fattureincloud for free at this address How does it work? = Select the order number from the drop-down menu, check in the preview that it is the right one and then send it to Fattureincloud.it Then you can open the bill at fattureincloud and you can also send it via email to the customer Credits Huge thanks to LoicTheAztec, Pascal Knecht, Rodolfo Melogli, Roberto Kalamun Pasini
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C