Peprodev vulnerabilities

Products

• Ultimate Profile Solutions 4

Newest

• peprodev branches map (mapify) PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9373 6.4 MediumOctober 14, 2026
• peprodev ultimate profile solutions PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute CVE-2026-4791 6.4 MediumOctober 10, 2026
• peprodev ultimate profile solutions PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function CVE-2025-3921 8.2 HighMay 7, 2025
• peprodev ultimate profile solutions PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration CVE-2025-3924 5.3 MediumMay 7, 2025
• peprodev ultimate profile solutions PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover CVE-2025-3844 9.8 CriticalMay 7, 2025
• pepro peprodev ultimate invoice, peprodev ultimate invoice +1 more PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure CVE-2024-13719 5.3 MediumFebruary 19, 2025
• pepro dev. group peprodev woocommerce receipt uploader, peprodev woocommerce receipt uploader +1 more PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting CVE-2024-8873 6.1 MediumNovember 16, 2024
• pepro dev. group peprodev ultimate invoice, peprodev ultimate invoice +1 more WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability CVE-2024-25933 5.3 MediumMarch 17, 2024
• pepro dev. group peprodev cf7 database, peprodev cf7 database +1 more WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-41863 7.1 HighSeptember 25, 2023