49 matches found
EUVD-2026-48120
Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-65516
CVE-2026-65516 - Unauthenticated Server-Side Request Forgery in the WordPress plugin PeproDev Ultimate Invoice
CVE-2026-65510
CVE-2026-65510 is a real issue affecting the WordPress plugin PeproDev Ultimate Invoice
EUVD-2026-48116
Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-65499
CVE-2026-65499 affects the WordPress plugin PeproDev Ultimate Invoice, version
EUVD-2026-48110
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...
CVE-2026-27372
The CVE concerns WordPress plugin PeproDev Ultimate Invoice (admin URL not needed) for affected versions
EUVD-2026-48153
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...
WordPress PeproDev Ultimate Invoice plugin < 2.2.6 - Unauthenticated Invoice Archive Download vulnerability
Unauthenticated Invoice Archive Download vulnerability discovered by Ashkan Moghaddas in WordPress Plugin PeproDev Ultimate Invoice versions 2.2.6...
CVE-2026-2343
The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII...
CVE-2026-2343
The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII...
CVE-2026-2343
The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII...
CVE-2026-2343 PeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive Download
The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII...
CVE-2026-2343
The CVE-2026-2343 entry concerns the PeproDev Ultimate Invoice WordPress plugin (versions up to 2.2.5). A bulk download invoices action creates ZIP archives of exported invoice PDFs with predictably named files, enabling an attacker to brute force and retrieve PII. The flaw is exploitable without...
CVE-2026-2343 PeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive Download
The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII...
PT-2026-27640
Name of the Vulnerable Software and Affected Versions PeproDev Ultimate Invoice WordPress plugin versions through 2.2.5 Description The plugin allows for the bulk download of invoices, generating ZIP archives containing exported invoice PDFs. The ZIP file names are predictable, potentially allowi...
WordPress plugin PeproDev Ultimate Invoice 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
EUVD-2024-43363
Malicious code in bioql PyPI...