Pdf Generator Addon For Elementor Page Builder Vulnerabilities

The PDF Generator for WordPress Elementor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5. This makes it possible for unauthenticated attackers to perform actions on files outside of the originally intended directory.

CVSS:

5.3

Affected:

up to 1.7.5

Fixed in:

2.0.1

Disclosed:

Dec 12, 2025

CVE-2025-24569 on NVD →

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

CVSS:

6.4

Affected:

up to 2.1.0

Fixed in:

2.2.0

Disclosed:

Apr 1, 2025

CVE-2025-31850 on NVD →

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.0.0 via the rtw_pgaepb_dwnld_pdf() function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensi...

CVSS:

7.5

Affected:

up to 2.0.0

Fixed in:

2.0.1

Disclosed:

Nov 15, 2024

CVE-2024-9935 on NVD →

The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

CVSS:

6.4

Affected:

up to 1.7.4

Fixed in:

1.7.5

Disclosed:

Oct 24, 2024

CVE-2024-50449 on NVD →