← CVE Intelligence

CVE-2026-97078

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.

Affected (CNA)

Vendor / productVersions
BoldGrid / Client Invoicing by Sprout Invoicesaffected n/a through 20.8.17

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.