Plugin icon

PDF for WPForms + Drag and Drop Template Builder

pdf-for-wpforms

Vulnerabilities:

6

Last Updated:

August 21, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-02-11
Title
PDF for WPForms < 6.3.1 - Missing Authorization
Fixed in
Fixed in 6.3.1
CVSS
4.3 (medium)
Published
2025-09-03
Title
PDF for WPForms < 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.3.0
CVSS
6.4 (medium)
Published
2025-08-23
Title
PDF for WPForms < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Fixed in
Fixed in 6.5.1
CVSS
8.8 (high)
Published
2025-06-05
Title
PDF for WPForms < 5.6.1 - Missing Authorization
Fixed in
Fixed in 5.6.1
CVSS
4.3 (medium)
Published
2025-03-26
Title
PDF for WPForms < 5.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Fixed in
Fixed in 5.3.1
CVSS
6.3 (medium)
Published
2025-01-14
Title
PDF for WPForms + Drag and Drop Template Builder < 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
Fixed in
Fixed in 4.8.0
CVSS
6.4 (medium)