Security Advisory

CVE-2026-2343

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-25 06:00:02

Last updated 2026-04-02 12:39:57

Assigner WPScan

State PUBLISHED

Description

The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII.

← Browse all CVEs View on cve.org ↗