CVE-2022-1617

概要

参考情報

• wpscan.com/vulnerability/7e40e506-ad02-44ca-9d21-3634f3907aad · Exploit

wp-invoice のその他の脆弱性

• CVE-2016-11011中 6.5The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
• CVE-2016-11010中 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
• CVE-2016-11009中 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
• CVE-2016-11008中 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
• CVE-2016-11007中 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.