Vulnerabilities in peprodev
7 resultsCVE-2025-3844CRITICALPeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account TakeoverEPSS 0.6%CVE-2024-8873MEDIUMPeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-13719MEDIUMPeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information ExposureEPSS 0.5%CVE-2025-3921HIGHPeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req FunctionEPSS 0.5%CVE-2025-3924MEDIUMPeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email EnumerationEPSS 0.4%CVE-2025-9373MEDIUMPeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-4791MEDIUMPeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' AttributeEPSS 0.2%