Advisories · Technology

add-ons.org PDF for WPForms.

Every CVE that names add-ons.org PDF for WPForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-68534 CVE record

CVSS 6.5 Medium

WordPress PDF for WPForms plugin <= 6.3.0 - Broken Access Control vulnerability
- add-ons.org PDF for WPForms
- Broken access control
Not analysed yet 20 Feb 2026
CVE-2025-60082 CVE record

CVSS 8.8 High

WordPress PDF for WPForms plugin <= 6.5.0 - Deserialization of untrusted data vulnerability
- add-ons.org PDF for WPForms
- Insecure deserialization
Not analysed yet 18 Dec 2025
CVE-2025-58620 CVE record

CVSS 6.5 Medium

WordPress PDF for WPForms Plugin <= 6.2.1 - Cross Site Scripting (XSS) Vulnerability
- add-ons.org PDF for WPForms
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2025
CVE-2025-49289 CVE record

CVSS 5.0 Medium

WordPress PDF for WPForms plugin <= 5.5.0 - Broken Access Control Vulnerability
- add-ons.org PDF for WPForms
- Broken access control
Not analysed yet 6 Jun 2025
CVE-2025-30767 CVE record

CVSS 5.4 Medium

WordPress PDF for WPForms plugin <= 5.3.0 - Arbitrary Shortcode Execution vulnerability
- add-ons.org PDF for WPForms
- Broken access control
Not analysed yet 27 Mar 2025