Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

peprodev vulnerabilities

7 published CVEs name peprodev among the affected products.

Published CVEs
7
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 1Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20241
  2. 20254
  3. 20262

Newest CVEs

  • CVE-2025-9373

    PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    peprodev · PeproDev Branches Map (Mapify)

    Medium6.4
  • CVE-2026-4791

    PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute

    peprodev · PeproDev Ultimate Profile Solutions

    Medium6.4
  • CVE-2025-3921

    PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function

    peprodev · PeproDev Ultimate Profile Solutions

    High8.2
  • CVE-2025-3924

    PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration

    peprodev · PeproDev Ultimate Profile Solutions

    Medium5.3
  • CVE-2025-3844

    PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover

    peprodev · PeproDev Ultimate Profile Solutions

    Critical9.8
  • CVE-2024-13719

    PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure

    peprodev · PeproDev Ultimate Invoice

    Medium5.3
  • CVE-2024-8873

    PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting

    peprodev · PeproDev WooCommerce Receipt Uploader

    Medium6.1