Vulnerabilidades de Pepro Dev. Group
CVEs publicadas que afetam produtos de Pepro Dev. Group: 4 registro(s), com severidade, exploração e correções.
CVE-2026-65516
Alta · 7.2
CWE-918 23/07/2026
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability
Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-65510
Alta · 7.1
CWE-79 23/07/2026
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-65499
Média · 6.5
CWE-862 23/07/2026
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-27372
Média · 6.5
CWE-201 23/07/2026
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.