CVE-2026-2343

The PeproDev Ultimate Invoice WordPress plugin (versions through 2.2.5 ) is vulnerable to an unauthenticated invoice archive download vulnerability. The flaw exists in the bulk download invoices action, which generates ZIP archives containing exported invoice PDFs. Because these ZIP files are nam...