CVE-2016-11007

The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.

The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.

El plugin wp-invoice versiones anteriores a 4.1.1 para WordPress, presenta un control de acceso incorrecto sobre el parámetro wpi_user_id para la recuperación de facturas.