GCVE - cpe:2.3:a:usabilitydynamics:wp-invoice:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:usabilitydynamics:wp-invoice:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Usabilitydynamics (`a4ae95d8-a06c-57a1-a18e-354b3f3475b1`)
Product	Wp Invoice (`4f05af6d-5eff-566c-a2ba-39c1e344183a`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-1617`	vulnerable	2026-06-08 05:39:13.576330	WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRF The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as well as escaping in some of them, allowing attacker to make a logged in admin change them and add XSS payload in them Published: 2024-01-16T15:52:49.812Z Updated: 2025-06-11T17:14:19.258Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/7e40e506-ad02-44ca-9d21-3634f3907aad/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11011`	vulnerable	2026-06-08 05:07:25.956996	Details available The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation. Published: 2019-09-20T14:47:29.000Z Updated: 2024-08-06T03:47:34.109Z Open on db.gcve.eu Reference links https://wpvulndb.com/vulnerabilities/8378 https://wordpress.org/plugins/wp-invoice/#developers http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11010`	vulnerable	2026-06-08 05:07:25.956694	Details available The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates. Published: 2019-09-20T14:46:10.000Z Updated: 2024-08-06T03:47:34.409Z Open on db.gcve.eu Reference links https://wpvulndb.com/vulnerabilities/8378 https://wordpress.org/plugins/wp-invoice/#developers http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11009`	vulnerable	2026-06-08 05:07:25.956417	Details available The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates. Published: 2019-09-20T14:45:30.000Z Updated: 2024-08-06T03:47:33.979Z Open on db.gcve.eu Reference links https://wpvulndb.com/vulnerabilities/8378 https://wordpress.org/plugins/wp-invoice/#developers http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11008`	vulnerable	2026-06-08 05:07:25.956011	Details available The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates. Published: 2019-09-20T14:44:47.000Z Updated: 2024-08-06T03:47:34.071Z Open on db.gcve.eu Reference links https://wpvulndb.com/vulnerabilities/8378 https://wordpress.org/plugins/wp-invoice/#developers http://www.pritect.net/blog/wp-invoice-4-1-1-security-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11007`	vulnerable	2026-06-08 05:07:25.955702	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11006`	vulnerable	2026-06-08 05:07:25.955145	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Wp Invoice

Notes

PURL mappings

Vulnerability references

Contribute