Pepro Dev. Group vulnerabilities
11 vulnerabilities
Known vulnerabilities in Pepro Dev. Group products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Peprodev Ultimate Invoice7 vulnerabilities
- Peprodev CF7 Database3 vulnerabilities
- Peprodev Woocommerce Receipt Uploader1 vulnerabilities
CVE-2025-31573pepro dev. grouppeprodev cf7 database+1
EPSS score0.29%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev CF7 Database pepro-cf7-database allows Stored XSS.This issue affects PeproDev CF7 Database: from n/a through <= 2.0.0.CVE-2025-24574pepro dev. grouppeprodev woocommerce receipt uploader+1EPSS score0.28%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev WooCommerce Receipt Uploader pepro-bacs-receipt-upload-for-woocommerce allows Reflected XSS.This issue affects PeproDev WooCommerce Receipt Uploader: from n/a through <= 2.6.9.CVE-2024-25933pepro dev. grouppeprodev ultimate invoice+2EPSS score0.45%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7.CVE-2024-49298pepro dev. grouppeprodev ultimate invoice+1EPSS score0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through <= 2.0.6.CVE-2024-32518pepro dev. grouppeprodev ultimate invoice+1EPSS score0.38%
Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0.CVE-2026-65499pepro dev. grouppeprodev ultimate invoice+1EPSS score0.27%
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.CVE-2026-65516pepro dev. grouppeprodev ultimate invoice+1EPSS score0.27%
Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.CVE-2026-65510pepro dev. grouppeprodev ultimate invoice+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.CVE-2026-27372pepro dev. grouppeprodev ultimate invoice+1EPSS score0.37%
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.CVE-2023-41863pepro dev. grouppeprodev cf7 database+2EPSS score0.38%
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin <= 1.7.0 versions.CVE-2023-41864pepro dev. grouppeprodev cf7 database+1EPSS score0.20%
Cross-Site Request Forgery (CSRF) vulnerability in Pepro Dev. Group PeproDev CF7 Database.This issue affects PeproDev CF7 Database: from n/a through 1.8.0.