medium5.3
CVE-2026-14313
PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce), a…
Impact
PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-woocommerce), all versions up to and including 2.8.0 (latest on wordpress.org; no fixed version available at the time of writing), is vulnerable to unauthenticated missing-authorization / IDOR write. Requires WooCommerce.
Affected products
| Product | Affected versions |
|---|---|
| Slug: Pepro-Bacs-Receipt-Upload-For-Woocommerce), All | through 2.8.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.