Peprodev vulnerabilities
We track 3 vulnerabilities in Peprodev products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2025.
Latest Peprodev vulnerabilities
- 8.2 High severity
PeproDev Ultimate Profile Solutions: Improper Authorization
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handel_ajax_req() function in versions 1.9.1 to 7.5.2. This makes it possible for unauthenticated attackers
- 9.8 Critical severity
PeproDev Ultimate Profile Solutions: Authentication Bypass Using an Alternate Path or Channel
The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Authentication Bypass in versions 1.9.1 to 7.5.2. This is due to handel_ajax_req() function not having proper restrictions on the change_user_meta functionality that makes it possibl
- 7.5 High severity
PeproDev Ultimate Invoice: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7.