Pepro Dev. Group Peprodev Ultimate Invoice
7 CVEs affecting Pepro Dev. Group Peprodev Ultimate Invoice. Latest disclosed: 2026-07-23. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65516 | High | 7.2 | 2026-07-23 | Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions. |
CVE-2026-65510 | High | 7.1 | 2026-07-23 | Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions. |
CVE-2026-65499 | Medium | 6.5 | 2026-07-23 | Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions. |
CVE-2026-27372 | Medium | 6.5 | 2026-07-23 | Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions. |
CVE-2024-49298 | Medium | 6.5 | 2024-10-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate… |
CVE-2024-32518 | Medium | 5.3 | 2024-04-17 | Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0. |
CVE-2024-25933 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Inv… |