Cross-site Scripting

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site ScriptingCVE-2024-8873peprodev · CVSS 6.1 · 0.5% likely

   CWE-79

2. WordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-41863Pepro Dev. Group · CVSS 7.1 · 0.4% likely

   CWE-79

3. WordPress PeproDev CF7 Database plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-31573Pepro Dev. Group · CVSS 7.1 · 0.3% likely

   CWE-79

4. WordPress PeproDev WooCommerce Receipt Uploader plugin <= 2.6.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-24574Pepro Dev. Group · CVSS 7.1 · 0.3% likely

   CWE-79

5. WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-49298Pepro Dev. Group · CVSS 6.5 · 0.3% likely

   CWE-79

6. WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-65510Pepro Dev. Group · CVSS 7.1 · 0.3% likely

   CWE-79

7. PeproDev Branches Map <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-9373peprodev · CVSS 6.4 · 0.2% likely

   CWE-79

8. PeproDev Ultimate Profile Solutions <= 8.2.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' AttributeCVE-2026-4791peprodev · CVSS 6.4 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.