Pdfcrowd

8 CVEs across 4 Pdfcrowd products. Browse Pdfcrowd vulnerabilities, severities, and proof-of-concept exploits.

Pdfcrowd products with known CVEs

Product	CVEs
Save As Pdf Plugin By Pdfcrowd	7
Save As Pdf	6
Save As Image	1
Save As Image Plugin By Pdfcrowd	1

Pdfcrowd CVEs — newest first
CVE	Severity	Score	Published	Summary
`CVE-2026-0862`	Medium	`6.1`	2026-01-24	The Save as PDF Plugin by PDFCrowd plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘options’ parameter in all versions up to, and…
`CVE-2024-3062`	Medium	`4.8`	2025-05-15	The Save as Image Plugin by Pdfcrowd WordPress plugin before 3.2.2 does not sanitise and escape some of its settings, which could allow high privilege users su…
`CVE-2024-10891`	Medium	`6.4`	2024-11-20	The Save as PDF Plugin by Pdfcrowd plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'save_as_pdf_pdfcrowd' shortcode in all v…
`CVE-2024-37549`	Medium	`5.9`	2024-07-21	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Sto…
`CVE-2024-35649`	Medium	`6.5`	2024-06-04	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Sto…
`CVE-2023-5971`	Medium	`4.8`	2024-05-14	The Save as PDF Plugin by Pdfcrowd WordPress plugin before 3.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such…
`CVE-2024-33684`	Medium	`6.5`	2024-04-29	Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a th…
`CVE-2024-31930`	Medium	`5.9`	2024-04-11	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS…
`CVE-2023-40668`	Medium	`5.9`	2023-09-27	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd plugin <= 2.16.0 versions.
`CVE-2023-40665`	Medium	`5.9`	2023-09-27	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pdfcrowd Save as Image plugin by Pdfcrowd plugin <= 2.16.0 versions.