Approved changes feed: RSS · Atom

cpe:2.3:a:pdfcrowd:save_as_pdf_plugin_by_pdfcrowd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPdfcrowd (7f085363-67df-5d7a-98f9-512b3784ef2e)
ProductSave As Pdf Plugin By Pdfcrowd (75a7e236-d3a7-52d9-8921-2e59c2eb8f6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0862 vulnerable 2026-06-08 07:47:13.387255 Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cross-Site Scripting via options
MEDIUM (6.1)
The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘options’ parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. NOTE: Successful exploitation of this vulnerability requires that the PDFCrowd API key is blank (also known as "demo mode", which is the default configuration when the plugin is installed) or known.
Published: 2026-01-24T15:34:06.548Z
Updated: 2026-04-08T17:01:05.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37549 vulnerable 2026-06-08 06:39:47.905455 WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 4.0.0.
Published: 2024-07-21T07:00:24.302Z
Updated: 2026-04-28T16:10:01.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35649 vulnerable 2026-06-08 06:39:42.230022 WordPress Save as PDF Plugin by Pdfcrowd plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.3.
Published: 2024-06-04T14:17:06.757Z
Updated: 2026-04-28T16:09:52.264Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33684 vulnerable 2026-06-08 06:37:31.979631 WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0.
Published: 2024-04-29T08:17:43.039Z
Updated: 2026-04-28T16:09:45.191Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31930 vulnerable 2026-06-08 06:35:32.428671 WordPress Save as PDF by Pdfcrowd plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.1 .
Published: 2024-04-11T12:24:44.844Z
Updated: 2026-04-28T16:09:32.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10891 vulnerable 2026-06-08 06:23:47.922398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40668 vulnerable 2026-06-08 06:11:04.182530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.