Plugin icon

Save as PDF Plugin by PDFCrowd

save-as-pdf-by-pdfcrowd

Vulnerabilities:

11

Last Updated:

September 18, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-09-18
Title
Save as PDF Plugin by PDFCrowd < 4.6.2 - Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute
Fixed in
Fixed in 4.6.2
CVSS
7.2 (high)
Published
2026-01-24
Title
Save as PDF Plugin by PDFCrowd < 4.5.6 - Reflected Cross-Site Scripting via options
Fixed in
Fixed in 4.5.6
CVSS
6.1 (medium)
Published
2025-09-22
Title
Save as PDF < 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.5.3
CVSS
6.4 (medium)
Published
2025-01-21
Title
Save as PDF Plugin by Pdfcrowd < 4.4.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 4.4.1
CVSS
8.1 (high)
Published
2024-11-19
Title
Save as PDF Plugin by Pdfcrowd < 4.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.2.2
CVSS
6.4 (medium)
Published
2024-07-06
Title
Save as PDF plugin by Pdfcrowd < 4.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.0.1
CVSS
4.4 (medium)
Published
2024-06-03
Title
Save as PDF Plugin by Pdfcrowd < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.0
CVSS
6.4 (medium)
Published
2024-04-26
Title
Save as PDF plugin by Pdfcrowd < 3.2.1 - Missing Authorization
Fixed in
Fixed in 3.2.1
CVSS
6.4 (medium)
Published
2024-04-18
Title
Save as PDF < 3.2.0 - Admin+ Stored XSS
Fixed in
Fixed in 3.2.0
CVSS
3.4 (low)
Published
2024-04-10
Title
Save as PDF < 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.2
CVSS
4.4 (medium)
Published
2023-09-27
Title
Save as PDF by Pdfcrowd < 2.16.1 - Admin+ Stored XSS
Fixed in
Fixed in 2.16.1
CVSS
3.5 (low)