35075 matches found
CVE-2025-58978
CVE-2025-58978 affects the PDF Generator for WordPress plugin (versions up to 1.5.4). The root cause is missing/incorrect authorization checking leading to broken access control, enabling exploitation of access levels due to misconfigured controls. Multiple sources confirm the vulnerability and p...
CVE-2025-58978 WordPress PDF Generator for WordPress Plugin <= 1.5.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WP Swings PDF Generator for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Generator for WordPress: from n/a through 1.5.4...
CVE-2025-58978: Missing Authorization
Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Generator for WordPress: from n/a through = 1.5.4...
WordPress Plugin: PDF Generator for WordPress – Security Vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security...
PT-2025-36799
Name of the Vulnerable Software and Affected Versions: WP Swings PDF Generator for WordPress versions n/a through 1.5.4 Description: The PDF Generator for WordPress plugin suffers from a missing authorization issue due to incorrectly configured access control security levels. Recommendations:...
Medium: cairo
Issue Overview: An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory dump. CVE-2025-50422 Affected Packages: cairo Issue Correction: Run dnf update...
PHP TCPDF XSS
The vulnerability of the PHP library TCPDF is related to the lack of measures taken to eliminate script-related HTML tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...
TCPDF XSS
The vulnerability of the PHP class for generating PDF documents via TCPDF is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
PHP tc-lib-pdf-font PDF Generation PDF
The vulnerability of the PHP class tc-lib-pdf-font for generating PDF documents via TCPDF is related to improper handling of the generation process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PHP TCPDF PDF Generation Bypass
The vulnerability of the PHP class for generating PDF documents via TCPDF is related to incorrect comparisons. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...
PHP TCPDF Complexity DoS
The vulnerability of the PHP library TCPDF is related to insufficient validation of input data during the analysis of unreliable SVG files. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Amazon Linux 2023 : cairo, cairo-devel, cairo-gobject (ALAS2023-2025-1172)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1172 advisory. An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory...
libQt5Pdf5-5.15.19-1.1 on GA media (moderate)
libQt5Pdf5-5.15.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15531-1 Rating: moderate Cross-References: CVE-2024-10229 CVE-2024-10827 CVE-2024-11477 CVE-2024-12694 CVE-2024-55549 CVE-2025-0436 CVE-2025-0762 CVE-2025-0996 CVE-2025-0999 CVE-2025-1426 CVE-2025-1919 CVE-2025-2136 CVE-2025-242...
MAL-2025-43612 Malicious code in betelgeuse-eslint-config-markdown-pdf-native (npm)
The package betelgeuse-eslint-config-markdown-pdf-native was found to contain malicious code...
MAL-2025-44662 Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)
The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...
MAL-2025-45184 Malicious code in middleware-markdown-pdf-entanglement-relay (npm)
The package middleware-markdown-pdf-entanglement-relay was found to contain malicious code...
Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)
The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...
Malicious code in middleware-markdown-pdf-entanglement-relay (npm)
The package middleware-markdown-pdf-entanglement-relay was found to contain malicious code...