CVE-2024-25933

CVE-2024-25933 concerns PeproDev Ultimate Invoice plugin for WordPress. Public details in connected sources indicate unauthenticated exposure of sensitive information via the init_plugin path, affecting PeproDev Ultimate Invoice versions up to 1.9.7. The NVD metrics assign a high base score (7.5)...

CVE-2024-25933 WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7...

PT-2024-21227 · Peprodev · Peprodev Ultimate Invoice

Name of the Vulnerable Software and Affected Versions: PeproDev Ultimate Invoice versions 1.9.7 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made available to individuals who should not...

WordPress Plugin PeproDev Ultimate Invoice Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PeproDev Ultimate Invoice < 1.9.8 - Unauthenticated Arbitrary Invoice Access

Description The plugin is vulnerable to Sensitive Information Exposure via the 'initplugin' function. This makes it possible for unauthenticated attackers to generate PDF or ZIP files of arbitrary invoices and extract sensitive data...

WordPress PeproDev Ultimate Invoice Plugin <= 1.9.7 is vulnerable to Sensitive Data Exposure

Software PeproDev Ultimate Invoice Type Plugin Vulnerable versions = 1.9.7 Fixed in 1.9.8 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-25933 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 06191f6ec08b Credits Abdi Pranata...

CVE-2023-41863

Unauth. Stored Cross-Site Scripting XSS vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin = 1.7.0 versions...

CVE-2023-41863 WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin = 1.7.0 versions...

CVE-2023-41863

CVE-2023-41863 affects the WordPress plugin PeproDev CF7 Database (≤ 1.7.0). The vulnerability is an unauthenticated Stored Cross-Site Scripting (XSS) via form submission, as detailed in Patchstack and corroborated by Wordfence listings. Impact is XSS execution impacting site visitors; exploitati...

CVE-2023-41863 WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin = 1.7.0 versions...

PeproDev CF7 Database < 1.8.0 - Unauthenticated Stored XSS

Description The plugin does not validate and escape some parameters, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...

PT-2023-28128 · Peprodev · Peprodev Cf7 Database Plugin

Name of the Vulnerable Software and Affected Versions: PeproDev CF7 Database plugin versions = 1.7.0 Description: The issue is related to an Unauth. Stored Cross-Site Scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, which can...

WordPress plugin PeproDev CF7 Database cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...