CVE-2026-27372mediumCWE-201

CVE-2026-27372: falha de média gravidade em PeproDev Ultimate Invoice

WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability

Publicada em

Seguir esta CVE+ Monitorar PeproDev Ultimate Invoice

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.4%
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Pepro Dev. Group · PeproDev Ultimate Invoice
CVEs relacionadas — PeproDev Ultimate Invoice

No mesmo produto, das mais perigosas para as menos.

CVE-2024-25933MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerabilityEPSS 0.5%CVE-2024-32518MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-49298MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-65516HIGHWordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2026-65499MEDIUMWordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-65510HIGHWordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%