WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pcloud-backup
Published
2025-04-01
Title
pCloud Backup <= 1.0.1 - Missing Authorization
Slug
pcrecruiter-extensions
Published
2024-12-19
Title
PCRecruiter Extensions < 1.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-block
Published
2023-10-12
Title
PDF Block <= 1.1.0 - Contributor+ Stored XSS
Slug
pdf-builder-for-wpforms
Published
2024-03-25
Title
PDF Builder for WPForms < 1.2.89 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-builder-for-wpforms
Published
2024-08-08
Title
PDF Builder for WPForms < 1.2.117 - Unauthenticated Full Path Disclosure
Slug
pdf-catalog-for-woocommerce
Published
2025-12-04
Title
PDF Catalog for WooCommerce <= 1.1.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
pdf-catalog-woocommerce
Published
2025-01-07
Title
PDF Catalog Woocommerce < 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-creator-lite
Published
2025-10-29
Title
PDF Creator Lite <= 1.2 - Cross-Site Request Forgery
Slug
pdf-embedder
Published
2024-03-18
Title
PDF Embedder < 4.7.1 - Contributor+ Stored XSS
Slug
pdf-embedder
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-embedder-fay
Published
2024-11-08
Title
Pdf Embedder Fay <= 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-contact-form-7
Published
2025-12-11
Title
PDF for Contact Form 7 + Drag and Drop Template Builder < 6.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Duplication
Slug
pdf-for-contact-form-7
Published
2025-08-23
Title
PDF for Contact Form 7 < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-elementor-forms
Published
2025-08-27
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-elementor-forms
Published
2025-08-22
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-elementor-forms
Published
2026-02-11
Title
PDF for Elementor Forms + Drag And Drop Template Builder < 6.5.0 - Missing Authorization
Slug
pdf-for-gravity-forms
Published
2025-08-23
Title
PDF for Gravity Forms + Drag And Drop Template Builder < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-woocommerce
Published
2025-01-24
Title
PDF Invoices for WooCommerce + Drag and Drop Template Builder < 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-woocommerce
Published
2025-05-07
Title
PDF Invoices for WooCommerce + Drag and Drop Template Builder < 5.4.0 - Authenticated (Administrator+) SQL Injection
Slug
pdf-for-woocommerce
Published
2025-08-23
Title
PDF Invoice Builder for WooCommerce < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection
Slug
pdf-for-wpforms
Published
2025-01-14
Title
PDF for WPForms + Drag and Drop Template Builder < 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
Slug
pdf-for-wpforms
Published
2025-03-26
Title
PDF for WPForms < 5.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Slug
pdf-for-wpforms
Published
2025-06-05
Title
PDF for WPForms < 5.6.1 - Missing Authorization
Slug
pdf-for-wpforms
Published
2025-09-03
Title
PDF for WPForms < 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-for-wpforms
Published
2025-08-23
Title
PDF for WPForms < 6.5.1 - Authenticated (Subscriber+) PHP Object Injection