CVE-2025-8397

The CVE concerns the WordPress plugin Save as PDF Button. All versions up to 1.9.2 are vulnerable to Stored Cross-Site Scripting via the restpackpdfbutton shortcode due to insufficient sanitization/escaping of user attributes. Authenticated attackers with contributor-level access (or higher) can ...

EUVD-2025-158260

The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbutton shortcode in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2025-8397 Save as PDF Button <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via restpackpdfbutton Shortcode

The Save as PDF Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's restpackpdfbutton shortcode in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

EUVD-2025-176638

Malicious code in rigel-markdown-pdf-jsonp-restart npm...

EUVD-2025-177952

Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin npm...

EUVD-2025-177950

Malicious code in markdown-pdf-draco-kuiperbelt-tethys npm...

EUVD-2025-178915

Malicious code in figures-materialize-markdown-pdf-miranda npm...

EUVD-2025-178521

Malicious code in higgs-markdown-pdf-kaus-helmet npm...

EUVD-2025-177948

Malicious code in markdown-pdf-mdx-build-config npm...

EUVD-2025-179726

Malicious code in cladistics-markdown-pdf-helmet-betelgeuse npm...

EUVD-2025-177389

Malicious code in package-process-helios-markdown-pdf npm...

EUVD-2025-176630

Malicious code in rimraf-markdown-markdown-pdf-biomimicry npm...

EUVD-2025-179868

Malicious code in cassini-markdown-pdf-fork-polaris npm...

EUVD-2025-178717

Malicious code in geodynamo-stop-hexo-markdown-pdf npm...

Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9024e58fde9dad0663362ec98c6e8589875cc63fd1fad0235b3a6cbc0dd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178002

Malicious code in luna-sequelize-markdown-pdf-meissa npm...

EUVD-2025-179023

Malicious code in ethology-ophiuchus-slidev-markdown-pdf npm...

EUVD-2025-177949

Malicious code in markdown-pdf-jsonp-brane-cross-env npm...

MAL-2025-187736 Malicious code in leda-loopback-markdown-pdf-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72689640fd1bfbbd21c0574fe0c4447c9f2ee55a6e3143380a55a797f7f3c422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187402 Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b797c75fdfd25ea211ed69e79105dbfa687f29b61dee7b5781593c49413254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...