Lucene search
+L

62 matches found

NVD
NVD
added 2026/02/19 9:16 a.m.6 views

CVE-2026-25364

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.8...

5.3CVSS0.00214EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:26 a.m.32 views

CVE-2026-25364 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.8...

5.3CVSS0.00214EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.2 views

CVE-2026-25364 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.8...

5.5AI score0.00214EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.4 views

CVE-2026-25364

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.8...

5.5AI score0.00214EPSS
Exploits0References2
CVE
CVE
added 2026/02/19 8:26 a.m.13 views

CVE-2026-25364

The CVE-2026-25364 issue affects WordPress Client Invoicing by Sprout Invoices (sprout-invoices)

5.3CVSS5.4AI score0.00214EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.11 views

WordPress plugin Client Invoicing by Sprout Invoices 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.3CVSS5.8AI score0.00214EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/15 9:7 a.m.6 views

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Client Invoicing by Sprout Invoices versions = 20.8.8...

5.3CVSS5.4AI score0.00214EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.7 views

CVE-2025-64227

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

9.8CVSS7AI score0.00325EPSS
Exploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.6 views

CVE-2025-64227

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

9.8CVSS0.00325EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.27 views

CVE-2025-64227 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

9.8CVSS0.00325EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.3 views

CVE-2025-64227 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

9.8CVSS6.6AI score0.00325EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.19 views

CVE-2025-64227

CVE-2025-64227 describes a PHP Object Injection vulnerability in the WordPress plugin “Client Invoicing by Sprout Invoices” (Sprout Invoices). The issue arises from deserializing untrusted data, enabling object injection. Affected versions are WordPress Client Invoicing by Sprout Invoices: up to ...

9.8CVSS6.6AI score0.00325EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.15 views

PT-2025-52172

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

7AI score0.00325EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/11/09 8:57 a.m.8 views

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Client Invoicing by Sprout Invoices versions = 20.8.7...

4.3CVSS7AI score0.00172EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/30 9:16 a.m.4 views

CVE-2025-64229

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

4.3CVSS6.9AI score0.00172EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/29 9:30 a.m.4 views

EUVD-2025-36613

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

4.3CVSS6.5AI score0.00172EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/29 8:38 a.m.10 views

CVE-2025-64229 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

4.3CVSS0.00172EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.3 views

CVE-2025-64229 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.7...

4.3CVSS6.6AI score0.00172EPSS
Exploits0References1
CVE
CVE
added 2025/10/29 8:38 a.m.12 views

CVE-2025-64229

CVE-2025-64229: Missing Authorization (Broken Access Control) in WordPress plugin “Client Invoicing by Sprout Invoices”

4.3CVSS6.6AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.7 views

WordPress plugin Client Invoicing by Sprout Invoices 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabili...

4.3CVSS6.3AI score0.00172EPSS
Exploits0References1
Rows per page
Query Builder