Sliced Invoices – WordPress Invoice Plugin
Sliced Invoices – WordPress Invoice Plugin has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2019 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (40%). Other recurring categories include SQL Injection, Cross-Site Scripting.
3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.
4 independent researchers contributed these findings, most of them (2) reported by Lucian Ioan Nitescu. Sliced Invoices – WordPress Invoice Plugin is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2019-25746Sliced Invoices – WordPress Invoice Plugin <= 3.8.2 - Authenticated (Contributor+) SQL Injection
Read the full analysisVulnerability Records
Sliced Invoices – WordPress Invoice Plugin
Author
SlicedInvoices
A flexible, well-supported, and easy-to-use WordPress invoicing plugin to create professional quotes and invoices that clients can pay for online. Sliced Invoices is an invoicing system that is easy to use but at the same time comes packed with features to help make your quoting and invoicing a breeze. Sliced Invoices – General Features Send Quotes and Invoices and get paid online Many customization options Lots of filters, actions and template tags Pre-defined line items Auto increment of Invoice & Quote numbers Set custom Invoice & Quote prefixes and/or suffixes Flexible tax settings (global, per Invoice/Quote or per line item) Customizable email templates including subject and content Custom email from name and email address Bcc yourself into all client emails Send clients emails at the click of a button Send clients automatic payment reminder emails Clone existing Quotes & Invoices 3 customizable Invoice & Quote templates Customize templates using CSS Add your logo and business details to Invoices & Quotes Bulk CSV import of Quotes & Invoices Support for WordPress Multisite (network activated) Invoices – Key Features Online Invoice payments with PayPal Express Checkout (or paid Stripe extension) Offline payment methods (Bank, check, money order or anything else) Name Invoices whatever you like (such as Bills, Tax Invoice or anything else) Set default due date (x number of days from Invoice date) Set custom Terms & Conditions for Invoices Invoice reporting Export Invoices to CSV Invoice in any currency Quotes – Key Features Commenting system for Quotes Clients can accept or decline Quotes Convert Quotes to Invoices with one click Name Quotes whatever you like (such as Estimate or anything else) Set custom Terms & Conditions for Quotes Quote reporting Export Quotes to CSV Quote in any currency Sliced Invoices is a feature-packed and flexible invoicing system for WordPress, check out how easy it is to add an invoice in this very quick 45 second video. Sliced Invoices – Free & Paid Extensions PDF quotes & PDF invoices extension Client Area extension Contact Form 7 extension (free) Formidable Forms extension (free) Gravity Forms extension (free) Authorize.Net Gateway Braintree Gateway Stripe Gateway Additional Tax extension (free) Better URL’s extension (free) Deposit Invoices extension Partial Payments extension Recurring Invoices extension Plus many more available here Our support is fantastic (check out the reviews) and if you need a feature that you can’t see, just ask and we will see if we can add it for a future release. Visit our website to find out more Features | Getting Started | Extensions | Bundles | FAQ
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C