Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SlicedInvoices Clear all filters
TI-2019-15796 CVE-2019-25746 · GHSA-f8m6-3296-2jx2

WordPress Sliced Invoices 3.8.2 SQL Injection via post Parameter

Priority MEDIUM 64

WordPress Sliced Invoices 3.8.2 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00226 Published 2026-06-15 No fix listed CWE-89
TI-2025-22791 CVE-2025-31628 · GHSA-47jh-4rfj-2mwq

WordPress Sliced Invoices plugin <= 3.10.0 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 30

Missing Authorization vulnerability in SlicedInvoices Sliced Invoices sliced-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sliced Invoices: from n/a through <= 3.10.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2025-04-01 No fix listed CWE-862