Read the docs

Pepro

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Pepro records in CISA KEV

No Pepro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Peprodev Ultimate Invoice 1 record LOW

Records

1 record in Peprodev Ultimate Invoice · all components

TI-2024-12758 CVE-2024-13719 · GHSA-c7vr-vpm2-822g

PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure

Priority LOW 31

The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.9 via the invoicing viewer due to missing validation on a user controlled key…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00477 Published 2025-02-19 No fix listed CWE-862
Open these records in search →