Log in Start free

SolidInvoice

Products

ProductCVEsExploitedLatest
SolidInvoice6–Sep 4, 2026

Exploited and recent CVEs

  • CVE-2026-61688 Medium 6.5 SolidInvoice allows cross-user access to API token request history via writable DataGrid LiveComponent props 0.4%
  • CVE-2026-61614 Medium 5.9 SolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser history 0.4%
  • CVE-2026-61608 Medium 6.8 SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links 0.3%
  • CVE-2026-61686 High 7.5 SolidInvoice: PHP unserialize() called on client-controlled data in DataGrid LiveComponent context prop 0.4%
  • CVE-2026-46489 High 8.1 SolidInvoice: Unrestricted file upload with no MIME validation allows stored XSS via malicious SVG logo 0.3%
  • CVE-2026-46622 High 8.1 SolidInvoice: API tokens stored as plaintext in the database allowing full credential compromise on database breach 0.2%