Pdf Print Vulnerabilities

[en] The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.

Affected:

up to 2.0.3

Fixed in:

2.0.3

Disclosed:

Aug 21, 2019

CVE-2018-20970 on NVD →

[en] The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

Affected:

up to 1.9.4

Fixed in:

1.9.4

Disclosed:

Aug 20, 2019

CVE-2017-18528 on NVD →

Unauthenticated Cross-Site-Scripting (XSS) vulnerability found by Robin Trost in WordPress PDF & Print plugin (versions <= 2.0.2).

Affected:

up to 2.0.3

Fixed in:

2.0.3

Disclosed:

Oct 3, 2018

The PDF & Print by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to 2.0.3 due to insufficient input sanitization and output escaping on the 'category' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute in a victi...

CVSS:

6.1

Affected:

up to 2.0.3

Fixed in:

2.0.3

Disclosed:

Dec 4, 2017

CVE-2018-20970 on NVD →

[en] Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version 1.5.7, Custom Admin Page prior to version 0.1.2, Custom Fields Search prior to version 1.3.2,...

Affected:

up to 1.9.4

Fixed in:

1.9.4

Disclosed:

May 22, 2017

CVE-2017-2171 on NVD →

The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

CVSS:

6.1

Affected:

up to 1.9.4

Fixed in:

1.9.4

Disclosed:

Apr 14, 2017

CVE-2017-18528 on NVD →

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Vulnerable parameter is "bws_license_key". Upgrade this plugin.

Affected:

up to 1.7.5

Fixed in:

1.7.5

Disclosed:

Oct 3, 2015

The PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVSS:

6.1

Affected:

up to 1.7.5

Fixed in:

1.7.5

Disclosed:

Aug 7, 2014

The PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

Affected:

up to 1.7.5

Fixed in:

1.7.5

Disclosed:

Aug 7, 2014

Affected:

up to 1.9.4

Fixed in:

1.9.4

The PDF &amp; Print by BestWebSoft WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affected:

up to 1.7.5

Fixed in:

1.7.5