CVE-20XX-?
agent?

Invoiceplane CVEs.

Published CVEs affecting Invoiceplane, ranked by exploit odds.

2 CVEs · updated 2026-11-06 11:41 UTC

Reset all
  1. CVE-2024-56975

    InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerability in the upload_file method of the Upload controller.

    Code execution Invoiceplane

    9.8 CRITICAL 0.7% exploit odds Fix listed
  2. CVE-2025-67084

    File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leading to Remote Code Execution (RCE).

    Code execution Web app Invoiceplane

    9.9 CRITICAL 0.4% exploit odds No fix listed

All CVEs affecting Invoiceplane that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.