Lucene search
+L

2170 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/28 12:00 a.m.•2 views

CVE-2026-12124: Missing Authorization

The PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the serveTemplatePdfAjax function and the serveTemplatePdf REST route which is registered...

5.3CVSS5.8AI score0.0035EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/23 12:18 p.m.•26 views

CVE-2026-65510

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

7.1CVSS0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/23 12:18 p.m.•21 views

CVE-2026-65516

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

7.2CVSS0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/23 12:18 p.m.•23 views

CVE-2026-65499

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

6.5CVSS0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/23 12:17 p.m.•16 views

CVE-2026-27372

Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...

6.5CVSS0.00374EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/23 11:19 a.m.•17 views

CVE-2026-65516

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

7.2CVSS5.2AI score0.00266EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/23 11:19 a.m.•47 views

CVE-2026-65516 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

7.2CVSS0.00266EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/23 11:19 a.m.•24 views

EUVD-2026-48120

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

7.2CVSS5.3AI score0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/23 11:19 a.m.•16 views

CVE-2026-65516 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in PeproDev Ultimate Invoice = 2.2.6 versions...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/23 11:19 a.m.•35 views

CVE-2026-65516

CVE-2026-65516 - Unauthenticated Server-Side Request Forgery in the WordPress plugin PeproDev Ultimate Invoice

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/23 11:19 a.m.•20 views

CVE-2026-65510 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/23 11:19 a.m.•16 views

CVE-2026-65510

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

7.1CVSS5.1AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/23 11:19 a.m.•31 views

CVE-2026-65510

CVE-2026-65510 is a real issue affecting the WordPress plugin PeproDev Ultimate Invoice

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/23 11:19 a.m.•50 views

CVE-2026-65510 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

7.1CVSS0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/23 11:19 a.m.•13 views

EUVD-2026-48116

Unauthenticated Cross Site Scripting XSS in PeproDev Ultimate Invoice = 2.2.6 versions...

7.1CVSS5.1AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/23 11:19 a.m.•32 views

CVE-2026-65499

CVE-2026-65499 affects the WordPress plugin PeproDev Ultimate Invoice, version

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/23 11:19 a.m.•39 views

CVE-2026-65499 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

6.5CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/23 11:19 a.m.•11 views

CVE-2026-65499 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

6.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/23 11:19 a.m.•14 views

EUVD-2026-48110

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

6.5CVSS5.3AI score0.00266EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/23 11:19 a.m.•22 views

CVE-2026-65499

Unauthenticated Broken Access Control in PeproDev Ultimate Invoice = 2.2.6 versions...

6.5CVSS5.2AI score0.00266EPSS
SaveExploits0References2
Rows per page
Query Builder