peprodev
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PeproDev Ultimate Profile Solutions | 4 | – | Oct 10, 2026 |
| PeproDev Branches Map (Mapify) | 1 | – | Oct 14, 2026 |
| PeproDev Ultimate Invoice | 1 | – | Feb 19, 2025 |
| PeproDev WooCommerce Receipt Uploader | 1 | – | Nov 16, 2024 |
Exploited and recent CVEs
- CVE-2025-9373 PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2026-4791 PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute 0.2%
- CVE-2025-3921 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function 0.4%
- CVE-2025-3924 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Unauthenticated Email Enumeration 0.4%
- CVE-2025-3844 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover 0.6%
- CVE-2024-13719 PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure 0.5%
- CVE-2024-8873 PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting 0.5%