What’s Vulnerable › Products

Pepro Dev. Group PeproDev Ultimate Invoice vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Pepro Dev. Group PeproDev Ultimate Invoice version is affected

Latest Pepro Dev. Group PeproDev Ultimate Invoice vulnerabilities

• CVE-2026-65516 — WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2)
• CVE-2026-65510 — WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-65499 — WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-27372 — WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability (CVSS 6.5)
• CVE-2024-49298 — WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-32518 — WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2024-25933 — WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerability (CVSS 7.5)