Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Client Invoicing by Sprout Invoices — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Client Invoicing by Sprout Invoices, with AI-generated Chinese analysis, references, and POCs.

Vendor: BoldGrid

CVE IDTitleCVSSSeverityPublished
CVE-2026-39562 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability CWE-862 9.1AICriticalAI2026-04-08
CVE-2026-32401 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability CWE-98 9.1 -2026-03-13
CVE-2026-25364 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability CWE-862 9.1AICriticalAI2026-02-19
CVE-2025-64227 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability CWE-502 9.8AICriticalAI2025-12-18
CVE-2025-64229 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability CWE-862 9.1AICriticalAI2025-10-29
CVE-2025-24606 WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability CWE-862 8.1 -2025-01-27
CVE-2024-53819 WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability CWE-862 5.3 Medium2024-12-09

All 7 known CVE vulnerabilities affecting Client Invoicing by Sprout Invoices with full Chinese analysis, references, and POCs where available.