VYPR

Devs Accounting

by WordPress

CVEs (2)

  • CVE-2026-9172Jun 24, 2026
    risk 0.00cvss epss

    The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to unauthorized modification/deletion of data due to a missing capability check on the delete_single_account() function in versions up to, and including, 1.2.0. The REST route…

  • CVE-2026-9175Jun 24, 2026
    risk 0.00cvss epss

    The Devs Accounting – Simple Accounting and Invoicing Solution plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.0. This is due to the get_single_account() REST API callback being registered with a permission_callback that…