CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-33684

WordPress Save as PDF plugin by Pdfcrowd plugin <= 3.2.0 - Broken Access Control to Stored XSS vulnerability

Status: Published
Published: 2024-04-29
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Missing Authorization vulnerability in Pdfcrowd Save as PDF plugin by Pdfcrowd allows Stored XSS.This issue affects Save as PDF plugin by Pdfcrowd: from n/a through 3.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pdfcrowd Save as PDF plugin by Pdfcrowd

Default version status: unaffected

n/a to ≤ 3.2.0affected

References

https://patchstack.com/database/vulnerability/save-as-pdf-by-pdfcrowd/wordpress-save-as-pdf-plugin-by-pdfcrowd-plugin-3-2-0-broken-access-control-to-stored-xss-vulnerability?_s_id=cve ↗