Invite Anyone

invite-anyone · plugin

Known security vulnerabilities for Invite Anyone. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 critical · latest Aug 18, 2024

Vulnerabilities

CVE-2017-18543
The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.
Critical 9.8
CVE-2017-18544
The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
High 8.8
CVE-2017-18545
The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.
High 7.5
CVE-2024-43327
WordPress Invite Anyone plugin <= 1.4.7 - Reflected Cross Site Scripting (XSS) vulnerability
Medium 6.1
CVE-2017-6955
An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress.
Medium 5.3