invoice ninja
Security Risk Profile
32
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 7, 2025 to present
7
Total CVEs
4
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
32/100
low
Severity Distribution
Critical
0High
4Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
SSRF
2
2
XSS
1
3
Malicious File Upload
1
Most Affected Products
1. Invoice Ninja Invoice Ninja7
2. invoiceninja Invoice Ninja3
3. Apple macOS1
Recent Vulnerabilities
See more →CVE-2026-58450
CVSS 5.3medium
Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter
6/30/2026🔧 No Patch
CVE-2026-29925
CVSS 7.7high
3/30/2026🔧 No Patch
CVE-2026-33742
CVSS 5.4EPSS 0%medium
Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes
3/26/2026🔧 No Patch
CVE-2025-10009
CVSS 8.6high
Authenticated admin RCE in Invoice Ninja
9/22/2025
CVE-2025-8700
CVSS 4.8EPSS 0%medium
Privilege Escalation via get-task-allow entitlement in Invoice Ninja
8/26/2025🔧 No Patch
CVE-2025-0474
CVSS 7.7EPSS 0%high
Invoice Ninja PDF Rendering Server Side Request Forgery
1/14/2025🔧 No Patch
CVE-2024-55555
CVSS 8.8high
1/7/2025🔧 No Patch
Monitor invoice ninja in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.