Read the docs

invoicing

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

invoicing records in CISA KEV

No invoicing vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 56

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00169 Published 2026-05-10 No fix listed CWE-80
Open these records in search →