PT-2023-15959

Name of the Vulnerable Software and Affected Versions PDF Viewer WordPress plugin versions prior to 1.0.0 Description The issue concerns a lack of validation and escaping of a shortcode attribute in the PDF Viewer WordPress plugin, potentially allowing users with a role as low as contributor to...

CVE-2023-0033: Undefined Security Weakness

The PDF Viewer WordPress plugin before 1.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...