Vendors / usability_dynamics Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now usability_dynamics records in CISA KEV No usability_dynamics vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as well as escaping in some of them, allowing attacker to make a logged in admin cha…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00266 · Published 2024-01-16 · No fix listed CWE-352
Priority LOW 32
The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01374 · Published 2019-09-20 · No fix listed CWE-269
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01972 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Open these records in search → All records by CVSS severity
0 2 7 0 0
THREATIST.IORead the docs