plugin

Wp Facturaone Vulnerabilities

1 known security issue reported for the Wp Facturaone WordPress plugin. Most recent disclosed Jul 6, 2026.

1 critical

Running Wp Facturaone on your site? Check whether your installed version is affected.

Scan your site free

FacturaONE <= 5.36 - Unauthenticated Remote Code Execution

critical

The FacturaONE para WooCommerce con VeriFactu plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.36. This makes it possible for unauthenticated attackers to execute code on the server.

CVSS:
9.8
Affected:
up to 5.36
Fixed in:
5.37
Disclosed:
Jul 6, 2026

CVE-2026-14289 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database