CVE-2016-11008

Mô tả

Tham khảo

• pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities · Exploit
• wordpress.org/plugins/wp-invoice · Release Notes
• wpvulndb.com/vulnerabilities/8378 · Third Party Advisory

Lỗ hổng khác của wp-invoice

• CVE-2022-1617TRUNG BÌNH 6.1The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as w…
• CVE-2016-11011TRUNG BÌNH 6.5The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
• CVE-2016-11010TRUNG BÌNH 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
• CVE-2016-11009TRUNG BÌNH 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
• CVE-2016-11007TRUNG BÌNH 5.3The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.