WordPress Save as PDF Button plugin <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via restpackpdfbutton Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Save as PDF Button versions = 1.9.2...

PT-2025-46803

Name of the Vulnerable Software and Affected Versions WooCommerce PDF Invoice Builder versions through 1.2.150 Description The software contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue impacts the WooCommerce PDF...

CVE-2025-8397: Improper Neutralization of Input During Web Page Generation

The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbutton shortcode in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2025-46794

Name of the Vulnerable Software and Affected Versions Save as PDF Button plugin for WordPress versions prior to 1.9.3 Description The software has a flaw due to insufficient input sanitization and output escaping on user-supplied attributes within the restpackpdfbutton shortcode. This allows...

CVE-2025-64269: Missing Authorization

Missing Authorization vulnerability in EDGARROJAS WooCommerce PDF Invoice Builder woo-pdf-invoice-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoice Builder: from n/a through = 1.2.150...

WordPress plugin WooCommerce PDF Invoice Builder has a security vulnerability

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

WordPress plugin “Save as PDF Button” has a cross-site scripting vulnerability

The WordPress Save as PDF Button plugin is a tool that adds one-click PDF generation functionality to WordPress websites, allowing visitors to save web content e.g., articles, product pages, etc. as PDF files with the click of a button. WordPress Save as PDF Button plugin has a cross-site scripti...

Linux Distros Unpatched Vulnerability : CVE-2025-64503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In...

DEBIAN-CVE-2025-64503

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to...

EUVD-2025-150365

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to...

CVE-2025-64503

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In cups-filters prior to 1.28.18, by crafting a PDF file with a large MediaBox value, an attacker can cause CUPS-Filter 1.x’s pdftoraster tool to...

CVE-2025-64503

CVE-2025-64503 is a publicly reported issue affecting cups-filters (and libcupsfilters) where a crafted PDF with an oversized MediaBox width triggers an integer overflow in bytesPerLine calculation, leading to an out-of-bounds write in pdftoraster/writePixel8 and potential memory corruption. The ...

EUVD-2025-123681

Malicious code in pino-pretty-markdown-pdf-altair-sirius npm...

EUVD-2025-111808

Malicious code in less-arcturus-charon-markdown-pdf npm...

EUVD-2025-123206

Malicious code in proxima-gacrux-markdown-pdf-kastra npm...

EUVD-2025-124024

Malicious code in ora-sagitta-callback-markdown-pdf npm...

EUVD-2025-111596

Malicious code in loglevel-rate-limiter-markdown-pdf-update npm...

EUVD-2025-113298

Malicious code in ganymede-nodemon-leda-markdown-pdf npm...

EUVD-2025-114935

Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager npm...

Malicious code in betelgeuse-betelgeuse-markdown-pdf-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c95bca846956aa66c7d81ff6a73a5633eceff85d1a084194aae220483f96e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...