Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Pdfcrowd — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Pdfcrowd. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Pdfcrowd is a web-based PDF conversion service that transforms HTML, URLs, and other formats into PDF documents. Historically, the platform has been susceptible to multiple cross-site scripting (XSS) vulnerabilities and remote code execution (RCE) flaws, often stemming from improper input validation and insecure file handling. The service has accumulated eight CVEs, with several critical issues allowing attackers to execute arbitrary code or inject malicious scripts. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for organizations relying on the service for document generation, particularly when processing untrusted input sources.

CVE ID Title CVSS Severity Published
CVE-2026-92807 Save as PDF Plugin by PDFCrowd <= 4.6.1 - Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute — Save as PDF Plugin by PDFCrowd CWE-94 8.8 High 2026-09-19
CVE-2026-0862 Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cross-Site Scripting via options — Save as PDF Plugin by PDFCrowd CWE-79 6.1 Medium 2026-01-24
CVE-2024-10891 Save as PDF Plugin by Pdfcrowd <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting — Save as PDF Plugin by PDFCrowd CWE-79 6.4 Medium 2024-11-20
CVE-2024-37549 WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability — Save as PDF plugin by Pdfcrowd CWE-79 5.9 Medium 2024-07-21
CVE-2024-35649 WordPress Save as PDF Plugin by Pdfcrowd plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability — Save as PDF plugin by Pdfcrowd CWE-79 6.5 Medium 2024-06-04
CVE-2024-33684 WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability — Save as PDF plugin by Pdfcrowd CWE-862 6.5 Medium 2024-04-29
CVE-2024-31930 WordPress Save as PDF by Pdfcrowd plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability — Save as PDF plugin by Pdfcrowd CWE-79 5.9 Medium 2024-04-11
CVE-2023-40668 WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS) — Save as PDF plugin by Pdfcrowd CWE-79 5.9 Medium 2023-09-27
CVE-2023-40665 WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS) — Save as Image plugin by Pdfcrowd CWE-79 5.9 Medium 2023-09-27

This page lists every published CVE security advisory associated with Pdfcrowd. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.