CVE-2016-11008

State: Published
Severity: Not scored
Published: Sep 20, 2019
Updated: Aug 6, 2024
Reserved: Sep 20, 2019

Read the record on cve.org

Description

The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://wpvulndb.com/vulnerabilities/8378
https://wordpress.org/plugins/wp-invoice/#developers
http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.