What’s Vulnerable › Products

BoldGrid Client Invoicing by Sprout Invoices vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your BoldGrid Client Invoicing by Sprout Invoices version is affected

Latest BoldGrid Client Invoicing by Sprout Invoices vulnerabilities

• CVE-2026-97078 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.17 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.3)
• CVE-2026-57418 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.13 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-39562 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.10 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-32401 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.9 - Local File Inclusion vulnerability (CVSS 7.2)
• CVE-2026-25364 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-64227 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2025-64229 — WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-24606 — WordPress Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress plugin <=20.8.1 - Broken Access Control vulnerability (CVSS 6.4)