Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

PeproDev Ultimate Invoice — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in PeproDev Ultimate Invoice, with AI-generated Chinese analysis, references, and POCs.

Vendor: Pepro Dev. Group

CVE IDTitleCVSSSeverityPublished
CVE-2026-65516 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability CWE-918 7.2 High2026-07-23
CVE-2026-65510 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-07-23
CVE-2026-65499 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability CWE-862 6.5 Medium2026-07-23
CVE-2026-27372 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability CWE-201 6.5 Medium2026-07-23
CVE-2026-2343 PeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive Download 9.1 -2026-03-25
CVE-2024-13719 PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure CWE-862 5.3 Medium2025-02-19
CVE-2024-49298 WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-10-17
CVE-2024-32518 WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability CWE-862 5.3 Medium2024-04-17
CVE-2024-25933 WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability CWE-200 5.3 Medium2024-03-17

All 9 known CVE vulnerabilities affecting PeproDev Ultimate Invoice with full Chinese analysis, references, and POCs where available.