Lucene search
+L

36 matches found

NVD
NVD
added 2026/07/11 5:16 a.m.7 views

CVE-2026-9738

The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'contentpositioncss' parameter in all versions up to, and including, 5.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

4.4CVSS0.00208EPSS
Exploits0References8
EUVD
EUVD
added 2026/07/11 3:44 a.m.6 views

EUVD-2026-43136

The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'contentpositioncss' parameter in all versions up to, and including, 5.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

4.4CVSS6.2AI score0.00208EPSS
Exploits0References8
CVE
CVE
added 2026/07/11 3:44 a.m.10 views

CVE-2026-9738

The WordPress plugin Print, PDF, Email by PrintFriendly (for WordPress) is vulnerable to Stored Cross-Site Scripting via the content_position_css parameter in all versions up to 5.5.10. Root cause: insufficient input sanitization and output escaping. Affected: Print, PDF, Email by PrintFriendly p...

4.4CVSS6.2AI score0.00208EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/07/11 3:44 a.m.29 views

CVE-2026-9738 Print, PDF, Email by PrintFriendly <= 5.5.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'content_position_css' Parameter

The Print, PDF, Email by PrintFriendly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'contentpositioncss' parameter in all versions up to, and including, 5.5.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

4.4CVSS0.00208EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2026/07/11 12:0 a.m.14 views

PT-2026-57402

Name of the Vulnerable Software and Affected Versions Print, PDF, Email by PrintFriendly for WordPress versions prior to 5.5.11 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level access and...

4.4CVSS6.2AI score0.00208EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2026/01/09 10:45 a.m.7 views

CVE-2022-0663

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS6.2AI score0.00565EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:32 a.m.9 views

CVE-2023-25032

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Print, PDF, Email by PrintFriendly plugin = 5.5.1 versions...

5.9CVSS5.6AI score0.00394EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2009-4033

Malware in sbrugna...

4.3CVSS6.4AI score0.01223EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-29011

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00394EPSS
Exploits0References1
NVD
NVD
added 2023/10/25 6:17 p.m.23 views

CVE-2023-25032

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Print, PDF, Email by PrintFriendly plugin = 5.5.1 versions...

5.9CVSS5.4AI score0.00394EPSS
Exploits0References1
OSV
OSV
added 2023/10/25 6:17 p.m.7 views

CVE-2023-25032

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Print, PDF, Email by PrintFriendly plugin = 5.5.1 versions...

4.8CVSS7.3AI score0.00394EPSS
Exploits0References1
Prion
Prion
added 2023/10/25 6:17 p.m.25 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Print, PDF, Email by PrintFriendly plugin = 5.5.1 versions...

4.3CVSS4.8AI score0.00394EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/25 12:0 a.m.6 views

WordPress Plugin Print, PDF, Email by PrintFriendly Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

5.9CVSS5.9AI score0.00394EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/10/24 11:37 a.m.10 views

CVE-2023-25032 WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Print, PDF, Email by PrintFriendly plugin = 5.5.1 versions...

5.9CVSS5.8AI score0.00394EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/24 11:37 a.m.31 views

CVE-2023-25032 WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Print, PDF, Email by PrintFriendly plugin = 5.5.1 versions...

5.9CVSS5.5AI score0.00394EPSS
Exploits0References1
CVE
CVE
added 2023/10/24 11:37 a.m.42 views

CVE-2023-25032

CVE-2023-25032 applies to the WordPress plugin Print, PDF, Email by PrintFriendly (versions &lt;= 5.5.1). The vulnerability is a Stored XSS that requires admin+ authentication to exploit. Root cause: input handling in the PrintFriendly feature allows injected script to be stored and later rendere...

5.9CVSS5.1AI score0.00394EPSS
Exploits0References1Affected Software1
WPVulnDB
WPVulnDB
added 2023/10/24 12:0 a.m.22 views

Print, PDF, Email by PrintFriendly < 5.5.2 - Admin+ Stored XSS

Description The plugin does not validate and escape some parameters, which could allow users with the admin role and above to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

5.9CVSS6AI score0.00394EPSS
Exploits0References2Affected Software1
Patchstack
Patchstack
added 2023/10/12 12:0 a.m.17 views

WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Print, PDF, Email by PrintFriendly Type Plugin Vulnerable versions = 5.5.1 Fixed in 5.5.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25032 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d63fd651e5b7 Credits Abdi...

5.9CVSS5.7AI score0.00394EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2022/06/22 12:0 a.m.36 views

WordPress PrintFriendly Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plug-in. A cross-site scripting vulnerability exists in versions of WordPress prior to PrintFriendly 5.2.3...

4.8CVSS1.6AI score0.00565EPSS
Exploits2References1
NVD
NVD
added 2022/06/20 11:15 a.m.18 views

CVE-2022-0663

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00565EPSS
Exploits2References1
Rows per page
Query Builder