Vulnerabilities in Pepro Dev. Group

7 results

CVE-2024-25933MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerabilityEPSS 0.5%CVE-2024-32518MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-41863HIGHWordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-24574HIGHWordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-31573HIGHWordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-49298MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2023-41864MEDIUMWordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%