CVE-2016-11008

The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpipaypal payer metadata updates...

CVE-2016-11008

The CVE-2016-11008 entry concerns the WordPress plugin WP-Invoice prior to 4.1.1, where there is incorrect access control over wpi_paypal payer metadata updates. The issue is described as an access-control flaw in the handling of PayPal payer metadata, affecting releases before 4.1.1. Public tech...