CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery

🗓️ 16 Jan 2026 06:43:21Reported by WordfenceType

Authenticated attackers can trigger server side requests via addContentToMpdf in DK PDF up to 2.3.0.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-14793	16 Jan 202606:43	–	attackerkb
Circl	CVE-2025-14793	16 Jan 202607:55	–	circl
CNNVD	WordPress plugin DK PDF code issue vulnerability	16 Jan 202600:00	–	cnnvd
CVE	CVE-2025-14793	16 Jan 202606:43	–	cve
EUVD	EUVD-2026-2956	16 Jan 202606:43	–	euvd
NVD	CVE-2025-14793	16 Jan 202607:15	–	nvd
Patchstack	WordPress DK PDF - WordPress PDF Generator plugin <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery vulnerability	15 Jan 202623:17	–	patchstack
Positive Technologies	PT-2026-3223	16 Jan 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-14793	17 Jan 202607:15	–	redhatcve
Vulnrichment	CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery	16 Jan 202606:43	–	vulnrichment

[
  {
    "vendor": "torstenbulk",
    "product": "DK PDF – WordPress PDF Generator",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.3.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b062f72a-542c-4212-af83-4faefbf69bd7
plugins	www.plugins.trac.wordpress.org/browser/dk-pdf/trunk/modules/PDF/Generator.php
plugins	www.plugins.trac.wordpress.org/browser/dk-pdf/trunk/modules/Frontend/WordPressIntegration.php
plugins	www.plugins.trac.wordpress.org/browser/dk-pdf/tags/2.3.0/templates/dkpdf-index.php
plugins	www.plugins.trac.wordpress.org/browser/dk-pdf/tags/2.3.0/modules/PDF/DocumentBuilder.php
plugins	www.plugins.trac.wordpress.org/changeset

08 Apr 2026 17:15Current

CVSS 3.15

EPSS0.00242

CWE-918