High severity7.5NVD Advisory· Published Aug 31, 2020· Updated Jun 17, 2026
CVE-2020-20625
CVE-2020-20625
Description
Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.
Affected products
3<=3.8.2+ 1 more
- (no CPE)range: <=3.8.2
- (no CPE)
- cpe:2.3:a:slicedinvoices:sliced_invoices:3.8.2:*:*:*:*:wordpress:*:*
Patches
Vulnerability mechanics
References
1- blog.nintechnet.com/multiple-vulnerabilities-in-sliced-invoices-plugin/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.