Invite Anyone Project Invite Anyone — known CVE vulnerabilities

Every CVE whose affected-product data names Invite Anyone Project Invite Anyone, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-18543 — CVSS 9.8 (critical): The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.
• CVE-2017-18544 — CVSS 8.8 (high): The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
• CVE-2017-18545 — CVSS 7.5 (high): The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.