Plugin icon

PeproDev Ultimate Invoice

pepro-ultimate-invoice

Vulnerabilities:

5

Last Updated:

March 8, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-03-04
Title
PeproDev Ultimate Invoice < 2.2.6 - Unauthenticated Invoice Archive Download
Fixed in
Fixed in 2.2.6
CVSS
5.3 (medium)
Published
2025-02-18
Title
PeproDev Ultimate Invoice < 2.1.0 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure
Fixed in
Fixed in 2.1.0
CVSS
5.3 (medium)
Published
2024-10-15
Title
PeproDev Ultimate Invoice < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.0.7
CVSS
6.4 (medium)
Published
2024-04-15
Title
PeproDev Ultimate Invoice < 2.0.2 - Missing Authorisation
Fixed in
Fixed in 2.0.2
CVSS
5.3 (medium)
Published
2024-02-20
Title
PeproDev Ultimate Invoice < 1.9.8 - Unauthenticated Arbitrary Invoice Access
Fixed in
Fixed in 1.9.8
CVSS
7.5 (high)