CVE-2024-53819: WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability
Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53819?
CVE-2024-53819 is classified as a Missing Authorization vulnerability that affects the Sprout Invoices Client Invoicing plugin.
How do I fix CVE-2024-53819?
To fix CVE-2024-53819, update the Sprout Invoices Client Invoicing plugin to the latest version beyond 20.8.0.
Which versions are affected by CVE-2024-53819?
CVE-2024-53819 affects all versions of the Sprout Invoices Client Invoicing plugin from its initial release up to and including version 20.8.0.
What type of vulnerability is CVE-2024-53819?
CVE-2024-53819 is a Missing Authorization vulnerability that may allow unauthorized access to sensitive data.
Who is impacted by CVE-2024-53819?
Users of the Sprout Invoices Client Invoicing plugin up to version 20.8.0 for WordPress are impacted by CVE-2024-53819.