CVE-2026-2343
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Mar 25, 2026
Vendor
unknown
Description
The PeproDev Ultimate Invoice WordPress plugin through 2.2.5 has a bulk download invoices action that generates ZIP archives containing exported invoice PDFs. The ZIP files are named predictably making it possible to brute force and retreive PII.