Approved changes feed: RSS · Atom

cpe:2.3:a:rednao:pdf_builder_for_wpforms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRednao (af804591-e3bd-5a2e-a1a6-9dee5950e1cf)
ProductPdf Builder For Wpforms (cd2995a9-1ac4-503d-a70c-61248e221599)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7414 vulnerable 2026-06-08 06:58:22.135986 PDF Builder for WPForms <= 1.2.116 - Unauthenticated Full Path Disclosure
MEDIUM (5.3)
The PDF Builder for WPForms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.2.116. This is due to the plugin allowing direct access to the composer-setup.php file which has display_errors on. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
Published: 2024-08-09T09:30:11.729Z
Updated: 2026-04-08T16:45:10.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29820 vulnerable 2026-06-08 06:33:29.390237 WordPress PDF Builder for WPForms plugin <= 1.2.88 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RedNao PDF Builder for WPForms allows Stored XSS.This issue affects PDF Builder for WPForms: from n/a through 1.2.88.
Published: 2024-03-27T06:54:37.016Z
Updated: 2026-04-28T16:09:19.725Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.