Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/17 7:15 a.m.•13 views

CVE-2025-14793

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/16 6:43 a.m.•40 views

CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS0.00275EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/01/16 6:43 a.m.•9 views

CVE-2025-14793 DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS5.4AI score0.00275EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•20 views

PT-2026-3223

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS5.8AI score0.00275EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•1 views

CVE-2025-14793: Server-Side Request Forgery (SSRF)

The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above, to make web requests to arbitrary...

5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•16 views

WordPress plugin DK PDF code issue vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

5CVSS5.8AI score0.00275EPSS
SaveExploits0References5
Rows per page
Query Builder