CVE-2016-11011

The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-09-20

Last modified

2024-08-06

Weaknesses

CWE-269

Affected products

• Wp-invoice (Usabilitydynamics)

References

• http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities
• https://wordpress.org/plugins/wp-invoice/#developers
• https://wpvulndb.com/vulnerabilities/8378