HighCVSS 7.2
EPSS 0.27%
Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.
Product
Pepro Dev. Group PeproDev Ultimate Invoice vulnerabilities
7 published CVES affecting Pepro Dev. Group PeproDev Ultimate Invoice, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 7
- Critical
- 0
- High
- 3
- Medium
- 4
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Pepro Dev. Group PeproDev Ultimate Invoice CVEs
Newest publication first
-
-
HighCVSS 7.1 EPSS 0.25%
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
-
MediumCVSS 6.5 EPSS 0.27%
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
-
MediumCVSS 6.5 EPSS 0.37%
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
-
MediumCVSS 6.5 EPSS 0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice pepro-ultimate-invoice allows Stored XSS.This issue affects PeproDev Ultimate Invoice: from n/a through <= 2.0.6.
-
MediumCVSS 5.3 EPSS 0.38%
Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0.
-
HighCVSS 7.5 EPSS 0.45%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.