Design/Logic Flaw

2019-09-2015:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.2%

The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.

CPENameOperatorVersion
wp-invoicelt4.1.1

CPE	Name	Operator	Version
	wp-invoice	lt	4.1.1

References

www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities

wordpress.org/plugins/wp-invoice/

wpvulndb.com/vulnerabilities/8378