CVE-2016-11011: Improper Privilege Management

The wp-invoice plugin before 4.1.1 for WordPress has wpiupdateuseroption privilege escalation...