CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. |
| 20/09/2019 |
| CVE-2016-11009 | MITTEL5.3 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. | 20/09/2019 |
| CVE-2016-11008 | MITTEL5.3 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. | 20/09/2019 |
| CVE-2016-11007 | MITTEL5.3 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval. | 20/09/2019 |
| CVE-2016-11006 | MITTEL5.3 | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes. | 20/09/2019 |