---
id: "CVE-2026-111593"
kind: "vulnerability"
aliases: ["CVE-2026-111593"]
title: "PDF Invoices for WooCommerce: rejected CVE, not a vulnerability"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "withdrawn"
category: "other"
products: []
ecosystems: []
tags: ["other", "woocommerce", "wordpress"]
not_affected_if: []
published_at: "2026-10-16T14:17:23+00:00"
first_seen_at: "2026-10-23T21:57:13+00:00"
updated_at: "2026-10-25T05:27:43+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111593", "first_seen_at": "2026-10-23T21:57:13+00:00"}]
---

# PDF Invoices for WooCommerce: rejected CVE, not a vulnerability

This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce plugin but was rejected and never published. Validation found the Shop Manager role already holds equivalent invoice deletion and renumbering capability, so no privilege boundary is crossed.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111593

## From the sources

Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role that could invoke the bulk invoice deletion and renumbering tool already holds the equivalent capability through the plugin's normal per-order invoice controls and through WooCommerce order management, so it crosses no privilege boundary. No CVE record should reference this ID.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_