WordPress PDF Viewer for Elementor Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer for Elementor Type Plugin Vulnerable versions = 2.9.3 Fixed in N/A OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 4 Developer Claim ownership PSID 769c101f6b45 Credits Yudistira...

WordPress PDF Viewer Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 4 Developer Claim ownership PSID d7d95e288520 Credits Yudistira Arya Required privilege Author Publish...

WordPress PDF Embedder Plugin <= 4.7.1 is vulnerable to Cross Site Scripting (XSS)

Software PDF Embedder Type Plugin Vulnerable versions = 4.7.1 Fixed in 4.8.0 OWASP Top 10 A6: Vulnerable and Outdated Components Classification Cross Site Scripting XSS CVE CVE-2024-4367 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7794a505b744 Credits m3ez Required...

WordPress PDF Viewer for Elementor Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer for Elementor Type Plugin Vulnerable versions = 2.9.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0845 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6b4d52880461 Credits WordFence Require...

WordPress PDF Viewer for Elementor Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer for Elementor Type Plugin Vulnerable versions = 2.9.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30524 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f86b1f9b2a9c Credits Khalid Yusuf Required privilege...

CVE-2024-29820 WordPress PDF Builder for WPForms plugin <= 1.2.88 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88...

WordPress PDF Builder for WPForms Plugin <= 1.2.88 is vulnerable to Cross Site Scripting (XSS)

Software PDF Builder for WPForms Type Plugin Vulnerable versions = 1.2.88 Fixed in 1.2.89 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29820 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7f7911ba8d07 Credits LVT-tholv2k Required privile...

WordPress PDF Embedder Plugin <= 4.6.4 is vulnerable to Cross Site Scripting (XSS)

Software PDF Embedder Type Plugin Vulnerable versions = 4.6.4 Fixed in 4.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29141 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 78231154a353 Credits Steven Julian Required privilege...

WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)

Software PDF Poster - PDF Embedder Plugin for WordPress Type Plugin Vulnerable versions = 2.1.17 Fixed in 2.1.18 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23508 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 77b3bf7aca30 Credits Le Ng...

WordPress PDF Generator For Fluent Forms Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software PDF Generator For Fluent Forms Type Plugin Vulnerable versions = 1.1.7 Fixed in 1.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6953 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f3bea2a974ac Credits drop...

WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer & 3D PDF Flipbook – DearPDF Type Plugin Vulnerable versions = 2.0.38 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23505 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d503ba2d3347 Credits Ngô Thiên An...

WordPress PDF Block Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)

Software PDF Block Type Plugin Vulnerable versions = 1.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45646 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID db7b4dd9bebf Credits Mika Required privilege...

WordPress PDF Generator for WordPress – Create & Customize PDF for Post, Pages and WooCommerce Products Plugin < 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software PDF Generator for WordPress – Create & Customize PDF for Post, Pages and WooCommerce Products Type Plugin Vulnerable versions 1.1.2 Fixed in 1.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4321 Patch priority Low CVSS severity Low 7.1...

PDF Generator for WordPress < 1.1.2 - Reflected XSS

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin PoC Make a logged in admin open the following URL:...

WordPress PDF Viewer Plugin < 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software PDF Viewer Type Plugin Vulnerable versions 1.0.0 Fixed in 1.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0033 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 6e3ff2a57463 Credits István Márton Required...

WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability

WordPress PDF and Print plugin version 1.7.4 suffers from a cross site scripting vulnerability. WordPress PDF And Print 1.7.4 Cross Site Scripting Vulnerability Plugin Name : PDF & Print Effected Version : 1.7.4 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS...