CI
Product
Client Invoicing by Sprout Invoices
9
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 7Low 0
Watch
Add Client Invoicing by Sprout Invoices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64227 | 9.8 | Dec 18 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability Affected: through 20.8.7 |
| CVE-2026-32401 | 7.2 | Mar 13 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability Affected: through 20.8.9 |
| CVE-2026-57418 | 6.5 | Jul 13 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability Affected: through 20.8.13 |
| CVE-2025-24606 | 6.4 | Jan 27 | WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability Affected: through 20.8.1 |
| CVE-2026-97078 | 5.3 | Sep 30 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability Affected: through 20.8.17 |
| CVE-2026-39562 | 5.3 | Apr 8 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability Affected: through 20.8.10 |
| CVE-2026-25364 | 5.3 | Feb 19 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability Affected: through 20.8.8 |
| CVE-2024-53819 | 5.3 | Dec 9 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability Affected: through 20.8.0 |
| CVE-2025-64229 | 4.3 | Oct 29 | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability Affected: through 20.8.7 |
Showing 9