WordPress Plugin Vulnerabilities

Invite Anyone <= 1.3.14 - Change of Email Invitation Content

Description

The Invite Anyone WordPress plugin was affected by a Change of Email Invitation Content security vulnerability.

Affects Plugins

Plugin icon
invite-anyone
Fixed in 1.3.15

References

CVE
CVE-2017-6955
URL
https://github.com/boonebgorges/invite-anyone/compare/2ed5266ad3ae40f8db39adf06f450bbad56e2eac...boonebgorges:6121de08df86c5005b657dd67e48aa02c7982855

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
419d1887-2b00-4898-867c-8b786027c650

Timeline

Publicly Published
2017-03-17 (about 9 years ago)
Added
2017-03-20 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Published
2025-11-10
Title
Hydra Booking < 1.1.28 - Unauthenticated Arbitrary Booking Cancellation via Weak Hash Generation
Published
2022-03-25
Title
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
Published
2017-01-04
Title
Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses