saskaita123 Invoice123

• CVE-2026-9857 Medium 4.3 Invoice123 <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Setting Modification via s123_submit_api_key & s123_submit_invoice_settings AJAX actions 0.5%