Miembros de
Boletines de Vulnerabilidades |
CVE-2026-2343 |
|
| Software afectado | WORDPRESS |
| The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-2343 | |
