Product by BoldGrid

    Client Invoicing By Sprout Invoices

    9 known vulnerabilities in Client Invoicing By Sprout Invoices (BoldGrid), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Client Invoicing By Sprout Invoices (BoldGrid)
    CriticalCVE-2025-64227

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-32401

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability

    		7.2
    MediumCVE-2026-57418

    BoldGrid Client Invoicing by Sprout Invoices: Missing Authorization

    		6.5
    MediumCVE-2026-97078

    BoldGrid Client Invoicing by Sprout Invoices: Authorization Bypass Through User-Controlled Key

    		5.3
    MediumCVE-2024-53819

    BoldGrid Client Invoicing by Sprout Invoices: Missing Authorization

    		5.3
    MediumCVE-2026-39562

    BoldGrid Client Invoicing by Sprout Invoices: Missing Authorization

    		5.3
    MediumCVE-2026-25364

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2025-24606

    BoldGrid Client Invoicing by Sprout Invoices: Missing Authorization

    		6.4
    MediumCVE-2025-64229

    WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability

    		4.3

    All products by BoldGrid