CVE-2026-14313

UNKNOWN 0.0

PeproDev WooCommerce Receipt Uploader <= 2.8.0 - Unauthenticated Order Receipt Tampering via IDOR

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce), all versions up to and including 2.8.0 (latest on wordpress.org; no fixed version available at the time of writing), is vulnerable to unauthenticated missing-authorization / IDOR write. Requires WooCommerce.

Vendor	unknown
Product	peprodev woocommerce receipt uploader
Published	Aug 6, 2026

Stay Ahead of the Next One

Get instant alerts for unknown peprodev woocommerce receipt uploader

Be the first to know when new unknown vulnerabilities affecting unknown peprodev woocommerce receipt uploader are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / PeproDev WooCommerce Receipt Uploader

0 ≤ 2.8.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/61d6aab4-7753-4a86-8b7e-81daa61654e8/

Credits

Lyris Vale WPScan