Sliced Invoices
Approved changes feed: RSS · Atom
cpe:2.3:a:slicedinvoices:sliced_invoices:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Slicedinvoices (2f7e86ce-4720-5082-8dbf-817908be24c2) |
|---|---|
| Product | Sliced Invoices (8f0260bc-a464-5caa-bb2f-c74afd536702) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wpplugins/sliced-invoices |
purl2cpe | 2026-06-01 10:15:15.785216 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25746 |
vulnerable | 2026-07-28 19:45:00.443649 |
WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter
HIGH (7.1)
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send requests to the admin.php endpoint with action=duplicate_quote_invoice and malicious 'post' values to extract sensitive database information or modify data.
Published: 2026-06-15T12:00:51.949Z
Updated: 2026-07-15T01:24:14.572Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31628 |
vulnerable | 2026-06-08 07:18:58.252573 |
WordPress Sliced Invoices plugin <= 3.10.0 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliced Invoices: from n/a through <= 3.10.0.
Published: 2025-04-01T20:58:14.920Z
Updated: 2026-04-28T16:12:10.723Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.