Pdf Generator For Wp Vulnerabilities

The PDF Generator for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application whic...

CVSS:

6.4

Affected:

up to 1.6.2

Fixed in:

1.6.3

Disclosed:

Jul 8, 2026

CVE-2026-57407 on NVD →

The PDF Generator for WordPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.5.4

Fixed in:

1.5.5

Disclosed:

Sep 9, 2025

CVE-2025-58978 on NVD →

The PDF Generator for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via vendored example files that employ various parameters (such as ‘city’) in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated a...

CVSS:

6.1

Affected:

up to 1.1.1

Fixed in:

1.1.2

Disclosed:

Jan 16, 2023

CVE-2022-4321 on NVD →