Invite Anyone Project Invite Anyone
3 CVEs affecting Invite Anyone Project Invite Anyone. Latest disclosed: 2019-08-16. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18543 | Critical | 9.8 | 2019-08-16 | The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations. |
CVE-2017-18544 | High | 8.8 | 2019-08-16 | The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF. |
CVE-2017-18545 | High | 7.5 | 2019-08-16 | The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input. |