Description
Unauthenticated Insecure Direct Object References (IDOR) in Client Invoicing by Sprout Invoices <= 20.8.17 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldGrid | Client Invoicing by Sprout Invoices | ≤ 20.8.17 | — |
Medium · 5.3
CVE-2026-97078
EUVD-2026-89896GHSA-wch3-pgc6-377m
WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack