Pepro Dev. Group

5 results · Clear filters · Feed

• High 7.2
  CVE-2026-65516

  WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability

  Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.

  Pepro Dev. Group PeproDev Ultimate Invoice
  Jul 23, 2026
• High 7.1
  CVE-2026-65510

  WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability

  Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.

  Pepro Dev. Group PeproDev Ultimate Invoice
  Jul 23, 2026
• High 7.1
  CVE-2025-31573

  WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev CF7 Database pepro-cf7-database allows Stored XSS.This issue affects PeproDev CF7 Database: from n/a through <= 2.0.0.

  Pepro Dev. Group PeproDev CF7 Database
  Apr 3, 2025
• High 7.1
  CVE-2025-24574

  WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev WooCommerce Receipt Uploader pepro-bacs-receipt-upload-for-woocommerce allows Reflected XSS.This issue affects PeproDev WooCommerce…

  Pepro Dev. Group PeproDev WooCommerce Receipt Uploader Web / CMS
  Feb 3, 2025
• High 7.1
  CVE-2023-41863

  WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)

  Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin <= 1.7.0 versions.

  Pepro Dev. Group PeproDev CF7 Database
  Sep 25, 2023