CVE-2025-2866

CVE-2025-2866 affects LibreOffice. A flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid PDF signatures to be accepted as valid, enabling PDF signature spoofing. Affected versions are LibreOffice 24.8 before 24.8.6 and 25.2 before 25.2.2. Public advisories from Debian...

CVE-2025-2866 PDF signature forgery with adbe.pkcs7.sha1 SubFilter

Improper Verification of Cryptographic Signature vulnerability in LibreOffice allows PDF Signature Spoofing by Improper Validation. In the affected versions of LibreOffice a flaw in the verification code for adbe.pkcs7.sha1 signatures could cause invalid signatures to be accepted as valid This...

PT-2025-18010 · Document Foundation +4 · Libreoffice +4

Name of the Vulnerable Software and Affected Versions: LibreOffice versions 24.8 through 24.8.5 LibreOffice versions 25.2 through 25.2.1 Description: The issue is related to an Improper Verification of Cryptographic Signature, allowing PDF Signature Spoofing by Improper Validation. A flaw in the...

CVE-2025-39427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beth Tucker Long WP Post to PDF Enhanced wp-post-to-pdf-enhanced allows Stored XSS.This issue affects WP Post to PDF Enhanced: from n/a through = 1.1.1...

CVE-2025-32583

Improper Control of Generation of Code 'Code Injection' vulnerability in termel PDF 2 Post pdf2post allows Remote Code Inclusion.This issue affects PDF 2 Post: from n/a through = 2.4.0...

Malicious code in pdf-to-office (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3412 Malicious code in pdf-to-office (npm)

--- -= Per source details. Do not edit below this line.=-...

The vulnerability of the parse_paragraph function in the ps-pdf.cxx component of the HTMLDOC document conversion tool allows a attacker to cause a service failure.

The vulnerability of the parseparagraph function in the ps-pdf.cxx component of the HTMLDOC document conversion tool is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to trigger a service failure remotely...

PT-2025-31931 · Tracker · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor version 10.5.2.395 Description: An out-of-bounds read vulnerability exists in the EMF functionality. Exploitation involves using a specially crafted EMF file, which could lead to the disclosure of sensitive information...

CVE-2025-1656

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-39427

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beth Tucker Long WP Post to PDF Enhanced wp-post-to-pdf-enhanced allows Stored XSS.This issue affects WP Post to PDF Enhanced: from n/a through = 1.1.1...

CVE-2025-32583

Improper Control of Generation of Code 'Code Injection' vulnerability in termel PDF 2 Post pdf2post allows Remote Code Inclusion.This issue affects PDF 2 Post: from n/a through = 2.4.0...

CVE-2025-32583 WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in termel PDF 2 Post allows Remote Code Inclusion. This issue affects PDF 2 Post: from n/a through 2.4.0...

CVE-2025-32583

CVE-2025-32583 affects WordPress PDF 2 Post plugin

CVE-2025-32583 WordPress PDF 2 Post Plugin <= 2.4.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in termel PDF 2 Post pdf2post allows Remote Code Inclusion.This issue affects PDF 2 Post: from n/a through = 2.4.0...

CVE-2025-39427 WordPress WP Post to PDF Enhanced plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beth Tucker Long WP Post to PDF Enhanced allows Stored XSS. This issue affects WP Post to PDF Enhanced: from n/a through 1.1.1...

CVE-2025-39427

CVE-2025-39427 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin WP Post to PDF Enhanced . The issue arises from improper input neutralization during web page generation, allowing stored XSS. Affected versions are listed as from none (n/a) through 1.1.1 . Public referen...

WordPress plugin WP Post to PDF Enhanced 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WP Post to PDF...

WordPress plugin PDF 2 Post 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

PT-2025-26906 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...