# Save as PDF Plugin by PDFCrowd.

Every CVE that names Save as PDF Plugin by PDFCrowd among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Save as PDF Plugin by PDFCrowd <= 4.6.1 - Authenticated (Contributor+) Arbitrary Function Invocation / Code Injection via 'pdf_created_callback' Shortcode Attribute](https://agentprime.io/advisories/CVE-2026-92807.md)
  `CVE-2026-92807` · CVE record: pdfcrowd Save as PDF Plugin by PDFCrowd · CVSS 8.8 High · Not analysed yet · Published 19 Sept 2026 · Tags: Code injection
- [Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cross-Site Scripting via options](https://agentprime.io/advisories/CVE-2026-0862.md)
  `CVE-2026-0862` · CVE record: pdfcrowd Save as PDF Plugin by PDFCrowd · CVSS 6.1 Medium · Not analysed yet · Published 24 Jan 2026 · Tags: Cross-site scripting (XSS)
- [Save as PDF Plugin by Pdfcrowd <= 4.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2024-10891.md)
  `CVE-2024-10891` · CVE record: pdfcrowd Save as PDF Plugin by PDFCrowd · CVSS 6.4 Medium · Not analysed yet · Published 20 Nov 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Save as PDF plugin by Pdfcrowd plugin <= 4.0.0 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-37549.md)
  `CVE-2024-37549` · CVE record: Pdfcrowd Save as PDF plugin by Pdfcrowd · CVSS 5.9 Medium · Not analysed yet · Published 21 Jul 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Save as PDF Plugin by Pdfcrowd plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-35649.md)
  `CVE-2024-35649` · CVE record: Pdfcrowd Save as PDF plugin by Pdfcrowd · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2024 · Tags: Cross-site scripting (XSS)
- [Save as PDF < 3.2.0 - Admin+ Stored XSS](https://agentprime.io/advisories/CVE-2023-5971.md)
  `CVE-2023-5971` · CVE record: Unknown Save as PDF Plugin by Pdfcrowd · CVSS 4.8 Medium · Not analysed yet · Published 9 May 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability](https://agentprime.io/advisories/CVE-2024-33684.md)
  `CVE-2024-33684` · CVE record: Pdfcrowd Save as PDF plugin by Pdfcrowd · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2024 · Tags: Broken access control
- [WordPress Save as PDF by Pdfcrowd plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-31930.md)
  `CVE-2024-31930` · CVE record: Pdfcrowd Save as PDF plugin by Pdfcrowd · CVSS 5.9 Medium · Not analysed yet · Published 11 Apr 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-40668.md)
  `CVE-2023-40668` · CVE record: Pdfcrowd Save as PDF plugin by Pdfcrowd · CVSS 5.9 Medium · Not analysed yet · Published 27 Sept 2023 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=save-as-pdf-plugin-by-pdfcrowd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/save-as-pdf-plugin-by-pdfcrowd/>. Everything for agents: <https://agentprime.io/llms.txt>.