CVE-2016-11009

The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2019-09-20

Last modified

2024-08-06

Weaknesses

CWE-668

Affected products

• Wp-invoice (Usabilitydynamics)

References

• http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
• https://wordpress.org/plugins/wp-invoice/#developers
• https://wpvulndb.com/vulnerabilities/8378