Known CVE

PDF Generator for WordPress < 1.1.2 - Cross Site Scripting

The plugin includes a vendored dompdf example file which is susceptible to Reflected Cross-Site Scripting and could be used against high privilege users such as admin

CVE-2022-4321

Medium2022CVSS 6.1CWE-79

cve2022 · wpscan · wordpress · wp · wp-plugin · xss · pdf-generator-for-wp · wpswings

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website