CVE-2026-2343

The CVE-2026-2343 entry concerns the PeproDev Ultimate Invoice WordPress plugin (up to version 2.2.5). Affected component: bulk download invoices action that creates ZIP archives containing exported invoice PDFs. Root cause: ZIPs are named predictably, enabling brute force access to PII stored in...