Facturaone vulnerabilities
We track 2 vulnerabilities in Facturaone products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2025.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest Facturaone vulnerabilities
- 9.3 Critical severity
TicketBAI Facturas para WooCommerce: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Blind SQL Injection.This issue affects TicketBAI Facturas para WooCommerce: from n/a throug
- 9.8 Critical severity
TicketBAI Facturas para WooCommerce: Improper Limitation of a Pathname to a Restricted Directory
The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versions up to, and including, 3.18. This makes it possible for unauthenticated attack