Log in Start free

Pepro Dev. Group

Products

ProductCVEsExploitedLatest
PeproDev Ultimate Invoice7–Jul 23, 2026
PeproDev CF7 Database3–Apr 3, 2025
PeproDev WooCommerce Receipt Uploader1–Feb 3, 2025

Exploited and recent CVEs

  • CVE-2026-65516 High 7.2 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2026-65510 High 7.1 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65499 Medium 6.5 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-27372 Medium 6.5 WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-31573 High 7.1 WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-24574 High 7.1 WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49298 Medium 6.5 WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-41864 Medium 4.3 WordPress PeproDev CF7 Database plugin <= 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-32518 Medium 5.3 WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-25933 Medium 5.3 WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability 0.5%
  • CVE-2023-41863 High 7.1 WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS) 0.4%