WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Tran Hoang Tuan Kiet in WordPress Plugin PDF Generator for WordPress versions = 1.5.4...

CVE-2025-58978

CVE-2025-58978 affects the PDF Generator for WordPress plugin (versions up to 1.5.4). The root cause is missing/incorrect authorization checking leading to broken access control, enabling exploitation of access levels due to misconfigured controls. Multiple sources confirm the vulnerability and p...

CVE-2025-58978 WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Generator for WordPress: from n/a through = 1.5.4...

CVE-2025-58978 WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Swings PDF Generator for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Generator for WordPress: from n/a through 1.5.4...

PT-2025-36799

Name of the Vulnerable Software and Affected Versions: WP Swings PDF Generator for WordPress versions n/a through 1.5.4 Description: The PDF Generator for WordPress plugin suffers from a missing authorization issue due to incorrectly configured access control security levels. Recommendations:...

WordPress plugin PDF Generator for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...

The vulnerability of the PHP class tc-lib-pdf-font for generating PDF documents by TCPDF allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PHP class tc-lib-pdf-font for generating PDF documents via TCPDF is related to improper handling of the generation process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Medium: cairo

Issue Overview: An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory dump. CVE-2025-50422 Affected Packages: cairo Issue Correction: Run dnf update...

Amazon Linux 2023 : cairo, cairo-devel, cairo-gobject (ALAS2023-2025-1172)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1172 advisory. An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory...

libQt5Pdf5-5.15.19-1.1 on GA media (moderate)

libQt5Pdf5-5.15.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15531-1 Rating: moderate Cross-References: CVE-2024-10229 CVE-2024-10827 CVE-2024-11477 CVE-2024-12694 CVE-2024-55549 CVE-2025-0436 CVE-2025-0762 CVE-2025-0996 CVE-2025-0999 CVE-2025-1426 CVE-2025-1919 CVE-2025-2136 CVE-2025-242...

Malicious code in middleware-markdown-pdf-entanglement-relay (npm)

The package middleware-markdown-pdf-entanglement-relay was found to contain malicious code...

MAL-2025-45813 Malicious code in request-fork-markdown-pdf-elektra (npm)

The package request-fork-markdown-pdf-elektra was found to contain malicious code...

Malicious code in betelgeuse-eslint-config-markdown-pdf-native (npm)

The package betelgeuse-eslint-config-markdown-pdf-native was found to contain malicious code...

MAL-2025-43612 Malicious code in betelgeuse-eslint-config-markdown-pdf-native (npm)

The package betelgeuse-eslint-config-markdown-pdf-native was found to contain malicious code...

MAL-2025-44662 Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)

The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...

MAL-2025-45184 Malicious code in middleware-markdown-pdf-entanglement-relay (npm)

The package middleware-markdown-pdf-entanglement-relay was found to contain malicious code...

Malicious code in request-fork-markdown-pdf-elektra (npm)

The package request-fork-markdown-pdf-elektra was found to contain malicious code...

Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)

The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...

CVE-2025-58620

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Stored XSS.This issue affects PDF for WPForms: from n/a through = 6.2.1...

Linux Distros Unpatched Vulnerability : CVE-2024-2971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. CVE-2024-2971 Note that...