PeproDev Ultimate Invoice

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. PeproDev Ultimate Invoice <= 2.0.9 - Insecure Direct Object Reference to Unauthenticated Order Information ExposureCVE-2024-13719peprodev · CVSS 5.3 · 0.5% likely

   CWE-862

2. WordPress PeproDev Ultimate Invoice plugin <= 1.9.7 - Sensitive Data Exposure vulnerabilityCVE-2024-25933Pepro Dev. Group · CVSS 5.3 · 0.5% likely

   CWE-200

3. WordPress PeproDev Ultimate Invoice plugin <= 2.0.0 - Broken Access Control vulnerabilityCVE-2024-32518Pepro Dev. Group · CVSS 5.3 · 0.4% likely

   CWE-862

4. WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerabilityCVE-2026-27372Pepro Dev. Group · CVSS 6.5 · 0.4% likely

   CWE-201

5. WordPress PeproDev Ultimate Invoice plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-49298Pepro Dev. Group · CVSS 6.5 · 0.3% likely

   CWE-79

6. WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2026-65516Pepro Dev. Group · CVSS 7.2 · 0.3% likely

   CWE-918

7. WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Broken Access Control vulnerabilityCVE-2026-65499Pepro Dev. Group · CVSS 6.5 · 0.3% likely

   CWE-862

8. WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-65510Pepro Dev. Group · CVSS 7.1 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.