Description
Unauthenticated Broken Access Control in Easy Invoice <= 2.3.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MatrixAddons | Easy Invoice | ≤ 2.3.8 | — |
Medium · 5.3
CVE-2026-66676
EUVD-2026-81512GHSA-9fhm-wjxp-vcjv
WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability
Published Sep 17, 2026 · Updated Sep 17, 2026 · Assigned by Patchstack