Vulnerabilities / Invoice Ninja
Invoice Ninja vulnerabilities
Advisories WPSec published for Invoice Ninja. Other sources may list more. Its attack surface: Invoice Ninja on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2379 | Invoice Ninja <= 1.0.11 - Unauthenticated Missing Authorization to Invoice Creation and Client Data Access via Purchase, Checkout and Client Portal Shortcodes | Medium 6.5 | 1.0.15 |
License: CC BY 4.0