Log in Start free

ITERAS

Products

ProductCVEsExploitedLatest
ITERAS2–Apr 24, 2026
Peppol-py1–Nov 28, 2025

Exploited and recent CVEs

  • CVE-2026-4078 Medium 6.4 ITERAS <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%
  • CVE-2025-66371 Medium 5.0 Peppol-py before 1.1.1 allows XXE attacks because of the Saxon configuration. When validating XML-based invoices, the XML parser could read files from the filesystem and expose their content to a remo 0.3%
  • CVE-2024-53710 High 7.1 WordPress ITERAS plugin <= 1.8.0 - CSRF to Stored XSS vulnerability 0.2%