Skip to content
OpenAdvisories

Vendor

torstenbulk

2 known vulnerabilities.

Products

DK PDF – WordPress PDF Generator 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2025-14793

    DK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery

    The DK PDF – WordPress PDF Generator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3.0 via the 'addContentToMpdf' function. This makes it possible for authenticated attackers, author level and above,…

    torstenbulk DK PDF – WordPress PDF Generator Web / CMS
  • Medium 6.1
    CVE-2024-8727

    DK PDF <= 1.9.6 - Reflected Cross-Site Scripting

    The DK PDF plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.9.6. This makes it possible for unauthenticated attackers to inject…

    torstenbulk DK PDF – WordPress PDF Generator Web / CMS