Log out
Get PRO

Latest

Input validation vulnerability in Save as PDF Plugin by PDFCrowd 4.5.2

  • Severity: medium-risk
  • Status: Open
  • Publication: September 22, 2025

The Save as PDF feature in WordPress is not secure and can be used by hackers to inject harmful code into pages. This can happen in versions 4.5.2 and earlier because the plugin does not properly clean or protect the input it receives from users. As a result, attackers who have contributor-level access or higher can insert their own code into pages, which will then run whenever someone visits that page.

Detected in:

Save as PDF plugin by Pdfcrowd open vulnerable versions: >= * <= 4.5.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.