4.3
Moyenne
CVE-2026-97183 The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers,…
Description
The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allowing any authenticated user, such as a Subscriber, to retrieve the email addresses, display names and profile details of all registered users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP-Invoice 4.3 | premières → 4.3.1 | Pas de correctif indiqué |