peprodev vulnerabilities
7 published CVEs name peprodev among the affected products.
- 7Published CVEs7 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-9373
PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
peprodev · PeproDev Branches Map (Mapify)
Medium6.4 - CVE-2026-4791
PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute
peprodev · PeproDev Ultimate Profile Solutions
Medium6.4 - CVE-2025-3921
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function
peprodev · PeproDev Ultimate Profile Solutions
High8.2 - CVE-2025-3924
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration
peprodev · PeproDev Ultimate Profile Solutions
Medium5.3 - CVE-2025-3844
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover
peprodev · PeproDev Ultimate Profile Solutions
Critical9.8 - CVE-2024-13719
PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure
peprodev · PeproDev Ultimate Invoice
Medium5.3 - CVE-2024-8873
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
peprodev · PeproDev WooCommerce Receipt Uploader
Medium6.1