← All advisories

Medium severity5.3NVD Advisory· Published Sep 17, 2026· Updated Sep 17, 2026

CVE-2026-66676

CVE-2026-66676

Description

Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Easy Invoicellm-fuzzy
Range: <=2.3.8
Package: https://wordpress.org/plugins/easy-invoice

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/easy-invoice/vulnerability/wordpress-easy-invoice-plugin-2-3-8-broken-access-control-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.