Unknown WP-Invoice

• CVE-2026-97183 Medium 4.3 WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers 0.2%
• CVE-2022-1617 Medium 6.1 WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRF 0.3%