Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2585▼ 302 respecto a la semana anterior

Críticas / altas1355▲ 99 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-65516	Aplazada	Alta (7.2)	0.27%	—	Peprodev Ultimate Invoice^AI	23/7/2026	23/7/2026	Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-65510	Aplazada	Alta (7.1)	0.25%	—	Peprodev Ultimate Invoice^AI	23/7/2026	23/7/2026	Unauthenticated Cross Site Scripting (XSS) in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-65499	Aplazada	Media (6.5)	0.27%	—	Peprodev Ultimate Invoice^AI	23/7/2026	23/7/2026	Unauthenticated Broken Access Control in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-27372	Aplazada	Media (6.5)	0.37%	—	Peprodev Ultimate Invoice^AI	23/7/2026	23/7/2026	Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice <= 2.2.6 versions.
CVE-2026-2343	Aplazada	Media (5.3)	0.20%	—	Peprodev Ultimate Invoice^AI	25/3/2026	17/6/2026	The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII.
CVE-2024-13719	Modificada	Media (5.3)	0.48%	—	Peprodev Ultimate Invoice	19/2/2025	17/6/2026	The PeproDev Ultimate Invoice plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.9 via the invoicing viewer due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view invoices for completed orders which…
CVE-2024-32518	Aplazada	Media (5.3)	0.38%	—	Peprodev Ultimate Invoice^AI	17/4/2024	12/8/2026	Missing Authorization vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 2.0.0.
CVE-2024-25933	Modificada	Alta (7.5)	0.45%	—	Peprodev Ultimate Invoice	17/3/2024	17/6/2026	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pepro Dev. Group PeproDev Ultimate Invoice.This issue affects PeproDev Ultimate Invoice: from n/a through 1.9.7.