Advisories · Technology
PeproDev WooCommerce Receipt Uploader.
Every CVE that names PeproDev WooCommerce Receipt Uploader among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDOR
- PeproDev WooCommerce Receipt Uploader
- Information disclosure
- CVSS 5.3 Medium
PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR
- PeproDev WooCommerce Receipt Uploader
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 6.1 Medium
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
- PeproDev WooCommerce Receipt Uploader
- Cross-site scripting (XSS)