Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Pepro Component: Peprodev Ultimate Invoice Clear all filters
TI-2024-12758 CVE-2024-13719 · GHSA-c7vr-vpm2-822g

PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure

Priority LOW 31

The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.9 via the invoicing viewer due to missing validation on a user controlled key…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00477 Published 2025-02-19 No fix listed CWE-862