medium5.3
CVE-2016-11007
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
Impact
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Usabilitydynamics | Wp-Invoice | before 4.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
- https://wordpress.org/plugins/wp-invoice/#developers
- https://wpvulndb.com/vulnerabilities/8378
- http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
- https://wordpress.org/plugins/wp-invoice/#developers
- https://wpvulndb.com/vulnerabilities/8378