Peprodev Ultimate Invoice
Approved changes feed: RSS · Atom
cpe:2.3:a:pepro_dev._group:peprodev_ultimate_invoice:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pepro Dev. Group (04a4e2b9-26b8-56c1-980d-e67f89076572) |
|---|---|
| Product | Peprodev Ultimate Invoice (da4e0b8f-60b1-53dc-8310-1ea5510df329) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-65516 |
vulnerable | 2026-07-29 01:06:20.112416 |
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
HIGH (7.2)
Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.
Published: 2026-07-23T11:19:10.392Z
Updated: 2026-07-23T15:09:52.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65510 |
vulnerable | 2026-07-29 01:06:20.109127 |
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
Published: 2026-07-23T11:19:07.828Z
Updated: 2026-07-23T14:50:44.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65499 |
vulnerable | 2026-07-29 01:06:20.091409 |
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability
MEDIUM (6.5)
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
Published: 2026-07-23T11:19:03.852Z
Updated: 2026-07-23T14:50:56.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27372 |
vulnerable | 2026-07-29 00:34:59.475192 |
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability
MEDIUM (6.5)
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
Published: 2026-07-23T11:17:53.712Z
Updated: 2026-07-23T16:03:06.902Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49298 |
vulnerable | 2026-06-08 06:50:13.405549 |
WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through <= 2.0.6.
Published: 2024-10-17T19:02:18.479Z
Updated: 2026-04-28T16:10:24.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32518 |
vulnerable | 2026-06-08 06:35:33.275868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25933 |
vulnerable | 2026-06-08 06:31:24.027912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.