Plugin icon

wp-mpdf

wp-mpdf
Plugin closed

Vulnerabilities:

3

Last Updated:

September 21, 2025

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-09-26
Title
wp-mpdf < 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.9.2
CVSS
6.4 (medium)
Published
2024-03-13
Title
wp-mpdf < 3.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.8
CVSS
6.1 (medium)
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Fixed in
Fixed in 3.5.2
CVSS
5.4 (medium)