CVE-2026-12124: Missing Authorization

The PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the serveTemplatePdfAjax function and the serveTemplatePdf REST route which is registered...

Design/Logic Flaw

The Certify module before 6.x-2.3 for Drupal does not properly perform node access checks, which allows remote authenticated users to bypass intended access restrictions and obtain sensitive PDF certificate information via vectors related to "showing and creating the PDF certificates."...

PT-2015-6216

Name of the Vulnerable Software and Affected Versions Certify module for Drupal versions prior to 6.x-2.3 Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive PDF certificate information. This is due to the module not properly...