Sprout Invoices – Client Invoicing & Estimates

Vulnerabilities 13Slug sprout-invoicesLatest version 20.8.13WordPress.org →

Minimum safe version

20.8.11

Update to 20.8.11 or later to address 13 fixable vulnerabilities

Latest available20.8.13 ✓

Medium 5.3

2026-04-08< 20.8.11

CVE-2026-39562

CVE Wordfence

High 7.2

2026-03-13< 20.8.10

CVE-2026-32401

CVE Wordfence

Medium 5.3

2026-02-19< 20.8.9

CVE-2026-25364

CVE Wordfence

Critical 9.8

2025-12-18< 20.8.8

CVE-2025-64227

CVE EUVD Wordfence

Medium 4.3

2025-10-29< 20.8.8

CVE-2025-64229

CVE Wordfence

Medium 6.4

2025-01-27< 20.8.2

CVE-2025-24606

CVE EUVD Wordfence

Medium 5.3

2024-12-09< 20.8.1

CVE-2024-53819

CVE Wordfence Patchstack

N/A

< 20.5.4

Sprout Invoices < 20.5.4 - Sensitive Information Exposure

WPScan

N/A

2023-11-14< 20.5.4

WordPress Client Invoicing by Sprout Invoices Plugin <= 20.5.3 is vulnerable to Sensitive Data Exposure

Patchstack

N/A

2023-11-13< 20.5.4

Sprout Invoices <= 20.5.3 - Sensitive Information Exposure

Wordfence

N/A

2023-07-19< 19.1

WordPress Client Invoicing by Sprout Invoices Plugin <= 19.0 is vulnerable to Cross Site Scripting (XSS)

Patchstack WPScan CVE

N/A

2016-02-09< 9.4

Client Invoicing by Sprout Invoices – Easy Estimates and Invoices for WordPress <= 9.3 - Missing Authorization

Wordfence

Medium 4.8

2021-11-17< 19.9.7

CVE-2021-24787

CVE Patchstack Wordfence WPScan