Launchpad.net

CVE 2016-11011

The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.

See the CVE page on Mitre.org for more details.