Pepro Dev. Group vulnerabilities

11 published CVEs name Pepro Dev. Group among the affected products.

Atom feed of new CVEs

11Published CVEs11 of them scored
4Last 12 monthspublished in the last year
0Critical5 more rated high
0Known exploitedin CISA's KEV catalog

Newest CVEs

CVE-2026-65516
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
High7.2
CVE-2026-65510
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
High7.1
CVE-2026-65499
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
Medium6.5
CVE-2026-27372
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
Medium6.5
CVE-2025-31573
WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability
Pepro Dev. Group · PeproDev CF7 Database
High7.1
CVE-2025-24574
WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability
Pepro Dev. Group · PeproDev WooCommerce Receipt Uploader
High7.1
CVE-2024-49298
WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
Medium6.5
CVE-2023-41864
WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability
Pepro Dev. Group · PeproDev CF7 Database
Medium4.3
CVE-2024-32518
WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
Medium5.3
CVE-2024-25933
WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability
Pepro Dev. Group · PeproDev Ultimate Invoice
Medium5.3

All 11 in the list