Known Vulnerabilities for Invoices by Ithemes
Listed below are 1 of the newest known vulnerabilities associated with "Invoices" by "Ithemes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71233 json | InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output dire... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-67329 json | @better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an authorization bypass... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-59109 json | SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoice... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-57418 json | Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorre... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-55219 json | Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.5, the cred... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-49056 json | Unauthenticated Sensitive Data Exposure in WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels <= 4.9... | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-39472 json | Shop manager PHP Object Injection in WooCommerce PDF Invoices & Packing Slips < 5.9.0 versions. | Not Provided | 2026-06-15 | 2026-06-15 |
| CVE-2026-13612 json | The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowin... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-13116 json | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in al... | Not Provided | 2026-07-11 | 2026-07-13 |
| CVE-2026-9719 json | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Reques... | Not Provided | 2026-06-06 | 2026-06-06 |