Peprodev
6 CVEs across 5 Peprodev products. Browse Peprodev vulnerabilities, severities, and proof-of-concept exploits.
Peprodev products with known CVEs
Peprodev CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-3924 | Medium | 5.3 | 2025-05-07 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized access of data via its publicly exposed reset-password endpoint. The… |
CVE-2025-3921 | High | 8.2 | 2025-05-07 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handel… |
CVE-2025-3844 | Critical | 9.8 | 2025-05-07 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req(… |
CVE-2024-13719 | Medium | 5.3 | 2025-02-19 | The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.9 via the invoic… |
CVE-2024-8873 | Medium | 6.1 | 2024-11-16 | The PeproDev WooCommerce Receipt Uploader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropri… |
CVE-2024-25933 | Medium | 5.3 | 2024-03-17 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Inv… |
CVE-2023-41863 | High | 7.1 | 2023-09-25 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin <= 1.7.0 versions. |