Advisories · Technology

BoldGrid Client Invoicing by Sprout Invoices.

Every CVE that names BoldGrid Client Invoicing by Sprout Invoices among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97078 CVE record

CVSS 5.3 Medium

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-57418 CVE record

CVSS 6.5 Medium

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 13 Jul 2026
CVE-2026-39562 CVE record

CVSS 5.3 Medium

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2026-32401 CVE record

CVSS 7.2 High

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- File inclusion
Not analysed yet 13 Mar 2026
CVE-2026-25364 CVE record

CVSS 5.3 Medium

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-64227 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Insecure deserialization
Not analysed yet 18 Dec 2025
CVE-2025-64229 CVE record

CVSS 4.3 Medium

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 29 Oct 2025
CVE-2025-24606 CVE record

CVSS 6.4 Medium

WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 27 Jan 2025
CVE-2024-53819 CVE record

CVSS 5.3 Medium

WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.0 - Insecure Direct Object References (IDOR) vulnerability
- BoldGrid Client Invoicing by Sprout Invoices
- Broken access control
Not analysed yet 9 Dec 2024