CVE-2026-12415 | pravel Invoice Generator Plugin up to 1.0.0 on WordPress pravel_invoice_edit_account privileges management

June 27, 2026 Yanac

A vulnerability described as critical has been identified in pravel Invoice Generator Plugin up to 1.0.0 on WordPress. Affected is the function pravel_invoice_edit_account. Executing a manipulation can lead to improper privilege management.

This vulnerability appears as CVE-2026-12415. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More