Lucene search
+L

35294 matches found

Positive Technologies
Positive Technologies
•added 2025/03/28 12:00 a.m.•19 views

PT-2025-26903 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

7.8CVSS7.8AI score0.0027EPSS
SaveExploits0References7
CNVD
CNVD
•added 2025/03/28 12:00 a.m.•21 views

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2025-22249)

PDF-XChange Editor is a PDF file viewing software from PDF-XChange running on Microsoft Windows systems. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current process...

7.8CVSS7.5AI score0.00278EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 4:15 p.m.•29 views

CVE-2025-22637

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

4.3CVSS0.00147EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 3:26 p.m.•67 views

CVE-2025-22637

CVE-2025-22637 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Print PDF Generator and Publisher . The issue affects versions up to 1.2.0 (from n/a through 1.2.0). The provided documents confirm the vulnerability type and affected software but do not supply det...

4.3CVSS8.4AI score0.00147EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/27 3:26 p.m.•36 views

CVE-2025-22637 WordPress Print PDF Generator and Publisher plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

4.3CVSS0.00147EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2025/03/27 12:31 p.m.•34 views

APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware

An advanced persistent threat APT group with ties to Pakistan has been attributed to the creation of a fake website masquerading as India's public sector postal system as part of a campaign designed to infect both Windows and Android users in the country. Cybersecurity company CYFIRMA has...

7.3AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/03/27 11:19 a.m.•20 views

WordPress Simplebooklet PDF Viewer and Embedder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim in WordPress Plugin Simplebooklet PDF Viewer and Embedder versions = 1.1.1...

6.5CVSS8.4AI score0.00298EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/27 11:15 a.m.•24 views

CVE-2025-30922

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in simplebooklet Simplebooklet PDF Viewer and Embedder simplebooklet allows Stored XSS.This issue affects Simplebooklet PDF Viewer and Embedder: from n/a through = 1.1.1...

6.5CVSS0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 11:15 a.m.•22 views

CVE-2025-30767

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 5.3.0...

5.4CVSS0.00374EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/27 10:55 a.m.•13 views

CVE-2025-30922 WordPress Simplebooklet PDF Viewer and Embedder plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in simplebooklet Simplebooklet PDF Viewer and Embedder simplebooklet allows Stored XSS.This issue affects Simplebooklet PDF Viewer and Embedder: from n/a through = 1.1.1...

6.5CVSS8.4AI score0.00298EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 10:55 a.m.•85 views

CVE-2025-30922

CVE-2025-30922 is an XSS vulnerability in Simplebooklet PDF Viewer and Embedder. Connected sources confirm the issue affects the Simplebooklet plugin for WordPress, with a stored cross-site scripting flaw in the plugin’s rendering path. The Wordfence vulnerability listing identifies the affected ...

6.5CVSS8.4AI score0.00298EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/27 10:54 a.m.•37 views

CVE-2025-30767 WordPress PDF for WPForms plugin <= 5.3.0 - Arbitrary Shortcode Execution vulnerability

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 5.3.0...

5.4CVSS0.00374EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/27 10:54 a.m.•12 views

CVE-2025-30767 WordPress PDF for WPForms plugin <= 5.3.0 - Arbitrary Shortcode Execution vulnerability

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 5.3.0...

5.4CVSS8.6AI score0.00374EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 10:54 a.m.•82 views

CVE-2025-30767

CVE-2025-30767 affects PDF for WPForms (WordPress) via Missing Authorization, enabling Arbitrary Shortcode Execution in PDF for WPForms plugins

5.4CVSS8.6AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•8 views

PT-2025-13161

Name of the Vulnerable Software and Affected Versions Simplebooklet PDF Viewer and Embedder versions 1.1.1 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Stored XSS attacks. This mea...

6.5CVSS8.4AI score0.00298EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•7 views

CVE-2025-30922: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in simplebooklet Simplebooklet PDF Viewer and Embedder simplebooklet allows Stored XSS.This issue affects Simplebooklet PDF Viewer and Embedder: from n/a through = 1.1.1...

6.5CVSS8.5AI score0.00298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•7 views

CVE-2025-22637: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

4.3CVSS8.6AI score0.00147EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•16 views

WordPress plugin “Print PDF Generator and Publisher” has a cross-site request forgeing vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Print PDF Generator and...

4.3CVSS8.2AI score0.00147EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•10 views

PT-2025-13053

Name of the Vulnerable Software and Affected Versions PDF for WPForms versions prior to 5.3.0 Description The issue is related to a lack of authorization in PDF for WPForms, allowing the exploitation of incorrectly configured access control security levels. Recommendations For versions prior to...

5.4CVSS8.4AI score0.00374EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•9 views

CVE-2025-30767: Missing Authorization

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 5.3.0...

5.4CVSS8.7AI score0.00374EPSS
SaveExploits0References1
Rows per page
Query Builder