Pepro Dev. Group vulnerabilities

Products

• Peprodev Ultimate Invoice 7
• Peprodev Woocommerce Receipt Uploader 4
• Peprodev Cf7 Database 3

Newest

• pepro dev. group peprodev woocommerce receipt uploader PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Image Attachment Disclosure via IDOR CVE-2026-14314 5.3 MediumAugust 6, 2026
• pepro dev. group peprodev woocommerce receipt uploader PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR CVE-2026-14313 5.3 MediumAugust 6, 2026
• pepro dev. group peprodev ultimate invoice WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-65516 7.2 HighJuly 23, 2026
• pepro dev. group peprodev ultimate invoice WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-65510 7.1 HighJuly 23, 2026
• pepro dev. group peprodev ultimate invoice WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability CVE-2026-65499 6.5 MediumJuly 23, 2026
• pepro dev. group peprodev ultimate invoice WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability CVE-2026-27372 6.5 MediumJuly 23, 2026
• pepro dev. group peprodev cf7 database WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-31573 7.1 HighApril 3, 2025
• pepro dev. group peprodev woocommerce receipt uploader WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24574 7.1 HighFebruary 3, 2025
• pepro dev. group peprodev woocommerce receipt uploader, peprodev woocommerce receipt uploader +1 more PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting CVE-2024-8873 6.1 MediumNovember 16, 2024
• pepro dev. group peprodev ultimate invoice WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-49298 6.5 MediumOctober 17, 2024
• pepro dev. group peprodev cf7 database WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-41864 4.3 MediumApril 18, 2024
• pepro dev. group peprodev ultimate invoice WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability CVE-2024-32518 5.3 MediumApril 17, 2024
• pepro dev. group peprodev ultimate invoice, peprodev ultimate invoice +1 more WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability CVE-2024-25933 5.3 MediumMarch 17, 2024
• pepro dev. group peprodev cf7 database, peprodev cf7 database +1 more WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41863 7.1 HighSeptember 25, 2023