Lucene search
+L

34383 matches found

CVE
CVE
•added 2025/12/09 2:52 p.m.•26 views

CVE-2025-49341

The CVE-2025-49341 entry describes a CSRF vulnerability in the WordPress PDF Creator Lite plugin (versions

7.1CVSS5.8AI score0.00147EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:14 p.m.•7 views

CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS6AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:14 p.m.•42 views

CVE-2025-67589 WordPress WooCommerce PDF Invoices & Packing Slips plugin <= 4.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:14 p.m.•30 views

CVE-2025-67589

CVE-2025-67589 affects the WordPress plugin “WooCommerce PDF Invoices & Packing Slips” (woocommerce-pdf-invoices-packing-slips), with vulnerability type Missing/Broken Authorization (broken access control). Affected versions are up to 4.9.1; the issue is caused by incorrectly configured access co...

4.3CVSS6AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/09 2:13 p.m.•61 views

CVE-2025-67469

CVE-2025-67469 concerns a CSRF vulnerability in the WordPress plugin “PDF Thumbnail Generator” (pdf-thumbnail-generator) affecting versions up to 1.4. The issue is a Cross-Site Request Forgery vulnerability that could enable unauthorized actions by an attacker via a logged-in user context. Public...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/09 2:13 p.m.•10 views

CVE-2025-67469 WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 2:13 p.m.•39 views

CVE-2025-67469 WordPress PDF Thumbnail Generator plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

4.3CVSS0.00131EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•25 views

PT-2025-49963

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoices & Packing Slips versions through 4.9.1 Description The software contains a flaw related to incorrectly configured access control security levels, allowing unauthorized access. The issue impacts the WooCommerce PDF...

4.3CVSS6.5AI score0.00225EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•7 views

CVE-2025-64085: NULL Pointer Dereference

A NULL pointer dereference vulnerability in the importDataObject function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.6AI score0.00304EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•22 views

PDF-XChange Editor security vulnerabilities

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor version v10.7.3.401, which originates from the presence of a null pointer dereference in the component util.readFileIntoStream, which coul...

7.5CVSS6.4AI score0.00304EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-49341: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alex Furr PDF Creator Lite pdf-creator-lite allows Stored XSS.This issue affects PDF Creator Lite: from n/a through = 1.2...

7.1CVSS5.8AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•6 views

CVE-2025-64086: NULL Pointer Dereference

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.6AI score0.00304EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•7 views

CVE-2025-67589: Missing Authorization

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 4.9.1...

4.3CVSS6AI score0.00225EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•7 views

CVE-2025-67469: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•15 views

PT-2025-50107

Name of the Vulnerable Software and Affected Versions PDF-XChange Editor version 10.7.3.401 Description A flaw exists in the util.readFileIntoStream component that can lead to a Denial of Service DoS. The issue is due to a NULL pointer dereference triggered by a specially crafted input...

7.5CVSS6.4AI score0.00304EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/09 12:00 a.m.•43 views

CVE-2025-64086

PDF-XChange Editor v10.7.3.401 contains a NULL pointer dereference in the util.readFileIntoStream component that can lead to a Denial of Service. The vulnerability is documented across multiple sources (PDF-XChange and Red Hat), with no public details on a fixed version or patch in the provided d...

7.5CVSS5.6AI score0.00304EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•34 views

PT-2025-49885

Cross-Site Request Forgery CSRF vulnerability in kubiq PDF Thumbnail Generator pdf-thumbnail-generator allows Cross Site Request Forgery.This issue affects PDF Thumbnail Generator: from n/a through = 1.4...

8.8CVSS6.9AI score0.00131EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/09 12:00 a.m.•16 views

WordPress plugin WooCommerce PDF Invoices & Packing Slips has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6.6AI score0.00225EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/09 12:00 a.m.•45 views

CVE-2025-64086

A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service DoS via a crafted input...

0.00304EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•28 views

PT-2025-49982

Cross-Site Request Forgery CSRF vulnerability in Alex Furr PDF Creator Lite pdf-creator-lite allows Stored XSS.This issue affects PDF Creator Lite: from n/a through = 1.2...

5.8AI score0.00147EPSS
SaveExploits0References2
Rows per page
Query Builder