Lucene search
+L

34 matches found

RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•17 views

CVE-2025-68534

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 6.3.0...

6.5CVSS5.5AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 3:46 p.m.•23 views

CVE-2025-68534

CVE-2025-68534 : WordPress PDF for WPForms plugin <= 6.3.0 has a Missing Authorization vulnerability (Broken Access Control) in the pdf-for-wpforms add-on. Root cause: incorrectly configured access control security levels allowing unauthorized PDF access. Impact: potential unauthorized access ...

6.5CVSS6AI score0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/20 3:46 p.m.•36 views

CVE-2025-68534 WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 6.3.0...

6.5CVSS0.00257EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•2 views

CVE-2025-68534: Missing Authorization

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 6.3.0...

6.5CVSS5.9AI score0.00257EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 7:32 a.m.•14 views

CVE-2025-60082

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.5.0...

8.8CVSS5.2AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•42 views

CVE-2025-60082 WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.5.0...

8.8CVSS0.00431EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 7:22 a.m.•29 views

CVE-2025-60082

CVE-2025-60082 affects the WordPress PDF for WPForms plugin (PDF-for-WPForms) with deserialization of untrusted data leading to possible object injection. Affected version Range: from n/a through

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/18 12:00 a.m.•13 views

WordPress plugin PDF for WPForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.8CVSS6.7AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•2 views

CVE-2025-60082: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•14 views

PT-2025-52140

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPForms: from n/a through = 6.3.1...

7AI score0.00431EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-26547

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00209EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-8402

Malicious code in bioql PyPI...

5.4CVSS9AI score0.00367EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•9 views

EUVD-2025-17272

Malicious code in bioql PyPI...

5CVSS5.5AI score0.00283EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/19 12:00 a.m.•1 views

CVE-2025-10647: Unrestricted Upload of File with Dangerous Type

The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxhandlerdownloadpdfmedia function in all versions up to, and including, 1.1.5. This makes it possible for authenticated attackers, with Subscriber-level access and...

8.8CVSS6.3AI score0.00862EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/03 2:36 p.m.•7 views

CVE-2025-58620 WordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Stored XSS.This issue affects PDF for WPForms: from n/a through = 6.2.1...

6.5CVSS5.9AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•2 views

CVE-2025-58620: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Stored XSS.This issue affects PDF for WPForms: from n/a through = 6.2.1...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•18 views

WordPress plugin PDF for WPForms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/06/08 1:19 p.m.•12 views

CVE-2025-49289

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through = 5.5.0...

5CVSS5.9AI score0.00283EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 12:53 p.m.•5 views

CVE-2025-49289 WordPress PDF for WPForms <= 5.5.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in add-ons.org PDF for WPForms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF for WPForms: from n/a through 5.5.0...

5CVSS7.2AI score0.00283EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:53 p.m.•45 views

CVE-2025-49289

CVE-2025-49289 is a Missing Authorization vulnerability in the PDF for WPForms (WordPress plugin) that affects the PDF for WPForms component up to version 5.5.0. The issue is rooted in improperly configured access control, allowing unauthorized users to access or manipulate PDF-related functional...

5CVSS5.9AI score0.00283EPSS
SaveExploits0References1
Rows per page
Query Builder