Pravel vulnerabilities

Products

• Invoice Generator 2

Newest

• pravel invoice generator Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter CVE-2026-12415 Public exploit 9.8 CriticalJune 27, 2026
• pravel invoice generator Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter CVE-2026-12416 Public exploit 9.8 CriticalJune 24, 2026
• pravel signup & signin SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover CVE-2026-12417 9.8 CriticalJune 24, 2026