Pepro Dev. Group vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 20252
4. 20264

Newest CVEs

• CVE-2026-65516

  WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  High7.2
• CVE-2026-65510

  WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  High7.1
• CVE-2026-65499

  WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  Medium6.5
• CVE-2026-27372

  WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  Medium6.5
• CVE-2025-31573

  WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability

  Pepro Dev. Group · PeproDev CF7 Database

  High7.1
• CVE-2025-24574

  WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

  Pepro Dev. Group · PeproDev WooCommerce Receipt Uploader

  High7.1
• CVE-2024-49298

  WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  Medium6.5
• CVE-2023-41864

  WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability

  Pepro Dev. Group · PeproDev CF7 Database

  Medium4.3
• CVE-2024-32518

  WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  Medium5.3
• CVE-2024-25933

  WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability

  Pepro Dev. Group · PeproDev Ultimate Invoice

  Medium5.3