high7.5
CVE-2020-20625
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
Impact
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Slicedinvoices | Sliced Invoices | Version 3.8.2 |