Usabilitydynamics Wp-Invoice
7 CVEs affecting Usabilitydynamics Wp-Invoice. Latest disclosed: 2024-01-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-11011 | Medium | 6.5 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation. |
CVE-2022-1617 | Medium | 6.1 | 2024-01-16 | The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as well as escaping in… |
CVE-2016-11010 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. |
CVE-2016-11009 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. |
CVE-2016-11008 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. |
CVE-2016-11007 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. |
CVE-2016-11006 | Medium | 5.3 | 2019-09-20 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. |