Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Pepro Dev. Group records in CISA KEVNo Pepro Dev. Group vulnerabilities are listed in CISA KEV.
Priority LOW 37
Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00266 · Published 2026-07-23 · No fix listed CWE-918
Priority LOW 34
Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00266 · Published 2026-07-23 · No fix listed CWE-862
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-07-23 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2025-04-03 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00282 · Published 2025-02-03 · No fix listed CWE-79
Priority LOW 30
Missing Authorization vulnerability in Pepro Dev.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00384 · Published 2024-04-17 · No fix listed CWE-862
Priority LOW 29
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00374 · Published 2026-07-23 · No fix listed CWE-201
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pepro Dev.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2024-10-17 · No fix listed CWE-79
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Pepro Dev.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.002 · Published 2024-04-18 · No fix listed CWE-352
THREATIST.IORead the docs