CVE-2026-57407: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.This issue affects PDF Generator for WordPress: from n/a through = 1.6.2...

CVE-2026-24579

CVE-2026-24579 is a missing/ broken authorization vulnerability in the WordPress plugin Ai Image Alt Text Generator for WP (versions up to and including 1.1.9). Public sources in the Connected documents describe this as an access-control flaw that allows exploitation due to misconfigured access l...

CVE-2025-58665: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tmontg1 Form Generator for WordPress form-generator-powered-by-jotform allows Stored XSS.This issue affects Form Generator for WordPress: from n/a through = 1.52...

CVE-2025-58978: Missing Authorization

Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Generator for WordPress: from n/a through = 1.5.4...

CVE-2022-4321: Undefined Security Weakness

The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin...