WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pdf-poster
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-poster
Published
2026-02-25
Title
PDF Poster < 2.4.1 - Missing Authorization
Slug
pdf-poster
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
pdf-poster
Published
2026-05-07
Title
PDF Poster – Display PDF Files with Custom Viewer < 2.5.0 - Missing Authorization
Slug
pdf-print
Published
2015-10-03
Title
PDF And Print <= 1.7.4 - Cross-Site Scripting (XSS)
Slug
pdf-print
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
pdf-print
Published
2018-09-30
Title
PDF & Print <= 2.0.2 - Unauthenticated Cross-Site-Scripting (XSS)
Slug
pdf-rechnungsverwaltung
Published
2024-10-15
Title
PDF-Rechnungsverwaltung <= 0.0.1 - Unauthenticated Local File Inclusion
Slug
pdf-resume-parser
Published
2026-01-13
Title
PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials
Slug
pdf-thumbnail-generator
Published
2024-09-12
Title
PDF Thumbnail Generator < 1.4 - Reflected Cross-Site Scripting
Slug
pdf-thumbnail-generator
Published
2025-12-06
Title
PDF Thumbnail Generator < 1.5 - Cross-Site Request Forgery
Slug
pdf-viewer
Published
2023-01-03
Title
PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode
Slug
pdf-viewer-block
Published
2021-09-20
Title
Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
pdf-viewer-by-themencode
Published
2024-02-12
Title
TNC PDF viewer < 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
pdf-viewer-by-themencode
Published
2024-09-30
Title
TNC PDF viewer < 3.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
pdf-viewer-for-elementor
Published
2024-03-29
Title
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-viewer-for-elementor
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-viewer-for-elementor
Published
2024-06-17
Title
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render
Slug
pdf-viewer-for-wordpress
Published
2025-05-16
Title
TNC FlipBook < 12.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf24-post-to-pdf
Published
2022-05-30
Title
PDF24 Article To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF
Slug
pdf24-posts-to-pdf
Published
2022-05-30
Title
PDF24 Articles To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF
Slug
pdf2post
Published
2025-04-15
Title
PDF 2 Post <= 2.4.0 - Authenticated (Subscriber+) Remote Code Execution
Slug
pdfjs-shortcode
Published
2025-01-16
Title
PDF.js Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdfjs-viewer-shortcode
Published
2021-11-08
Title
PDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting
Slug
pdfjs-viewer-shortcode
Published
2023-01-10
Title
PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode