Pepro Dev. Group vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.3%	CVE-2026-65516PeproDev Ultimate Invoice (WordPress plugin) · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65516 Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions. EPSS 0.3%Vulnerability Pepro Dev. Group CWE-918	CVE Database V5	2026-07-23
High	7.1	EPSS 0.3%	CVE-2026-65510PeproDev Ultimate Invoice (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65510 Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions. EPSS 0.3%Vulnerability Pepro Dev. Group CWE-79	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.3%	CVE-2026-65499PeproDev Ultimate Invoice (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-07-23CVE Database V5CVE-2026-65499 Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions. EPSS 0.3%Vulnerability Pepro Dev. Group CWE-862	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.4%	CVE-2026-27372PeproDev Ultimate Invoice (WordPress plugin) · Insertion of Sensitive Information Into Sent Data Medium6.5EPSS 0.4%2026-07-23CVE Database V5CVE-2026-27372 Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. EPSS 0.4%Vulnerability Pepro Dev. Group CWE-201	CVE Database V5	2026-07-23
High	7.1	EPSS 0.3%	CVE-2025-31573PeproDev CF7 Database (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-04-03CVE Database V5CVE-2025-31573 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev CF7 Database pepro-cf7-database allows Stored XSS.This issue affects PeproDev CF7 Database: from n/a through <= 2.0.0. EPSS 0.3%Vulnerability Pepro Dev. Group	CVE Database V5	2025-04-03
High	7.1	EPSS 0.3%	CVE-2025-24574PeproDev WooCommerce Receipt Uploader (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-02-03CVE Database V5CVE-2025-24574 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev WooCommerce Receipt Uploader pepro-bacs-receipt-upload-for-woocommerce allows Reflected XSS.This issue affects PeproDev WooCommerce Receipt Uploader: from n/a through <= 2.6.9. EPSS 0.3%Vulnerability Pepro Dev. Group	CVE Database V5	2025-02-03
Medium	6.5	EPSS 0.3%	CVE-2024-49298PeproDev Ultimate Invoice (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-10-17CVE Database V5CVE-2024-49298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through <= 2.0.6. EPSS 0.3%Vulnerability Pepro Dev. Group	CVE Database V5	2024-10-17
Medium	5.3	EPSS 0.4%	CVE-2024-32518PeproDev Ultimate Invoice (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.4%2024-04-17CVE Database V5CVE-2024-32518 Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0. EPSS 0.4%Vulnerability Pepro Dev. Group CWE-862	CVE Database V5	2024-04-17
Medium	5.3	EPSS 0.5%	CVE-2024-25933PeproDev Ultimate Invoice (WordPress plugin) · Information Exposure Medium5.3EPSS 0.5%2024-03-17CVE Database V5CVE-2024-25933 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7. EPSS 0.5%Vulnerability Pepro Dev. Group CWE-200	CVE Database V5	2024-03-17

Page 1 of 1