Vendors / SlicedInvoices Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now SlicedInvoices records in CISA KEV No SlicedInvoices vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-06-15 · No fix listed CWE-89
Priority LOW 38
Missing Authorization vulnerability in Sliced Invoices.This issue affects Sliced Invoices: from n/a through 3.9.2.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00323 · Published 2024-06-09 · No fix listed CWE-862
Priority LOW 36
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01744 · Published 2020-08-31 · No fix listed CWE-89
Priority LOW 30
Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliced Invoices: from n/a through <= 3.10.0…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00398 · Published 2025-04-01 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 3 1 0 0
THREATIST.IORead the docs