GCVE - cpe:2.3:a:web_invoice_project:web_invoice:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:web_invoice_project:web_invoice:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Web Invoice Project (`8acc3feb-665d-501b-9100-1217641b0c23`)
Product	Web Invoice (`98e56b75-ca2c-5e4e-89df-651faf94f6ae`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-4372`	vulnerable	2026-06-08 05:51:37.361355	Web Invoice <= 2.1.3 - Authenticated SQLi The Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by high privilege users such as admin by default. However, depending on the plugin configuration, other users, such as subscriber could exploit this as well Published: 2023-01-02T21:49:39.886Z Updated: 2025-04-10T17:55:40.174Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/218f8015-e14b-46a8-889d-08b2b822f8ae https://bulletin.iese.de/post/web-invoice_2-1-3_2	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.