CVE-2020-20625: Improper Neutralization of Special Elements used in an SQL Command

Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php...

PT-2020-15272

Name of the Vulnerable Software and Affected Versions Sliced Invoices plugin for WordPress versions 3.8.2 and earlier Description The issue allows for unauthenticated information disclosure and authenticated SQL injection. This is due to a problem in the core/class-sliced.php file. Recommendation...