Advisories · Technology

Pepro Dev. Group PeproDev Ultimate Invoice.

Every CVE that names Pepro Dev. Group PeproDev Ultimate Invoice among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-65516 CVE record

CVSS 7.2 High

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Server-side request forgery (SSRF)
Not analysed yet 23 Jul 2026
CVE-2026-65510 CVE record

CVSS 7.1 High

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2026-65499 CVE record

CVSS 6.5 Medium

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Broken access control
Not analysed yet 23 Jul 2026
CVE-2026-27372 CVE record

CVSS 6.5 Medium

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Information disclosure
Not analysed yet 23 Jul 2026
CVE-2024-49298 CVE record

CVSS 6.5 Medium

WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2024
CVE-2024-32518 CVE record

CVSS 5.3 Medium

WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Broken access control
Not analysed yet 17 Apr 2024
CVE-2024-25933 CVE record

CVSS 5.3 Medium

WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability
- Pepro Dev. Group PeproDev Ultimate Invoice
- Information disclosure
Not analysed yet 17 Mar 2024