WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pdf-for-wpforms
Published
2026-02-11
Title
PDF for WPForms < 6.3.1 - Missing Authorization
Slug
pdf-generator-addon-for-elementor-page-builder
Published
2024-10-24
Title
PDF Generator Addon for Elementor Page Builder < 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-generator-addon-for-elementor-page-builder
Published
2024-11-15
Title
PDF Generator Addon for Elementor Page Builder < 2.0.1 - Unauthenticated Arbitrary File Download
Slug
pdf-generator-addon-for-elementor-page-builder
Published
2025-04-01
Title
PDF Generator Addon for Elementor Page Builder < 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-generator-for-wp
Published
2023-01-16
Title
PDF Generator for WordPress < 1.1.2 - Reflected XSS
Slug
pdf-generator-for-wp
Published
2025-08-28
Title
PDF Generator for WordPress < 1.5.4 - Editor+ RCE
Slug
pdf-generator-for-wp
Published
2025-09-09
Title
PDF Generator for WordPress < 1.5.5 - Missing Authorization
Slug
pdf-image-generator
Published
2024-09-30
Title
PDF Image Generator <= 1.5.6 - Reflected Cross-Site Scripting
Slug
pdf-invoices-and-packing-slips-for-woocommerce
Published
2024-03-06
Title
PDF Invoices and Packing Slips For WooCommerce < 1.3.8 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-invoices-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pdf-invoicing-for-woocommerce
Published
2024-11-22
Title
PDF Invoices & Packing Slips Generator for WooCommerce < 2.2.2 - Reflected Cross-Site Scripting
Slug
pdf-light-viewer
Published
2021-09-15
Title
PDF Light Viewer < 1.4.12 - Authenticated Command Injection
Slug
pdf-poster
Published
2024-01-24
Title
PDF Poster - PDF Embedder Plugin for WordPress < 2.1.18 - Reflected Cross-Site Scripting
Slug
pdf-poster
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-print
Published
2015-10-03
Title
PDF And Print <= 1.7.4 - Cross-Site Scripting (XSS)
Slug
pdf-print
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
pdf-print
Published
2018-09-30
Title
PDF & Print <= 2.0.2 - Unauthenticated Cross-Site-Scripting (XSS)
Slug
pdf-rechnungsverwaltung
Published
2024-10-15
Title
PDF-Rechnungsverwaltung <= 0.0.1 - Unauthenticated Local File Inclusion
Slug
pdf-resume-parser
Published
2026-01-13
Title
PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials
Slug
pdf-thumbnail-generator
Published
2024-09-12
Title
PDF Thumbnail Generator < 1.4 - Reflected Cross-Site Scripting
Slug
pdf-thumbnail-generator
Published
2025-12-06
Title
PDF Thumbnail Generator < 1.5 - Cross-Site Request Forgery
Slug
pdf-viewer
Published
2023-01-03
Title
PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode
Slug
pdf-viewer-block
Published
2021-09-20
Title
Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
pdf-viewer-by-themencode
Published
2024-02-12
Title
TNC PDF viewer < 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
pdf-viewer-by-themencode
Published
2024-09-30
Title
TNC PDF viewer < 3.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting