WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pdf-rechnungsverwaltung
Published
2024-10-15
Title
PDF-Rechnungsverwaltung <= 0.0.1 - Unauthenticated Local File Inclusion
Slug
pdf-resume-parser
Published
2026-01-13
Title
PDF Resume Parser <= 1.0 - Unauthenticated Sensitive Information Disclosure in SMTP Credentials
Slug
pdf-smart-viewer-for-elementor
Published
2026-08-18
Title
PDF Smart Viewer for Elementor <= 1.0.4 - Unauthenticated Server-Side Request Forgery
Slug
pdf-thumbnail-generator
Published
2024-09-12
Title
PDF Thumbnail Generator < 1.4 - Reflected Cross-Site Scripting
Slug
pdf-thumbnail-generator
Published
2025-12-06
Title
PDF Thumbnail Generator < 1.5 - Cross-Site Request Forgery
Slug
pdf-viewer
Published
2023-01-03
Title
PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode
Slug
pdf-viewer-block
Published
2021-09-20
Title
Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
pdf-viewer-by-themencode
Published
2024-02-12
Title
TNC PDF viewer < 2.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
pdf-viewer-by-themencode
Published
2024-09-30
Title
TNC PDF viewer < 3.2.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
pdf-viewer-for-elementor
Published
2024-03-29
Title
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf-viewer-for-elementor
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdf-viewer-for-elementor
Published
2024-06-17
Title
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render
Slug
pdf-viewer-for-wordpress
Published
2025-05-16
Title
TNC FlipBook < 12.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdf24-post-to-pdf
Published
2022-05-30
Title
PDF24 Article To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF
Slug
pdf24-posts-to-pdf
Published
2022-05-30
Title
PDF24 Articles To PDF <= 4.2.2 - Arbitrary Settings Update via CSRF
Slug
pdf2post
Published
2025-04-15
Title
PDF 2 Post <= 2.4.0 - Authenticated (Subscriber+) Remote Code Execution
Slug
pdfdraft
Published
2026-07-27
Title
PDFDraft < 1.1.1 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameter
Slug
pdfjs-shortcode
Published
2025-01-16
Title
PDF.js Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdfjs-viewer-shortcode
Published
2021-11-08
Title
PDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting
Slug
pdfjs-viewer-shortcode
Published
2023-01-10
Title
PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode
Slug
pdfjs-viewer-shortcode
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdfl-io
Published
2026-04-07
Title
pdfl.io < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute
Slug
pdpa-consent
Published
2025-06-19
Title
PDPA Consent for Thailand <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pdpa-thailand
Published
2025-09-22
Title
Designil PDPA Thailand < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdq-csv
Published
2023-07-17
Title
PDQ CSV < 2.0.0 - Admin+ Stored Cross-Site Scripting