Extension WordPress
Vulnérabilités PDF Poster – Display PDF Files with Custom Viewer
Cette page rassemble les failles publiées pour PDF Poster – Display PDF Files with Custom Viewer, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de PDF Poster – Display PDF Files with Custom Viewer
5 fiches
PDF Poster – Display PDF Files with Custom Viewer <= 2.4.1 – Missing Authorization
The PDF Poster – Display PDF Files with Custom Viewer plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.4.1. This makes it possible…
*-2.4.1
2.5.0
07/05/2026
Freemius <= 2.10.1 – Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-2.2.0
2.3.1
30/04/2026
PDF Poster <= 2.4.0 – Missing Authorization
The PDF Poster plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.4.0. This makes it possible for authenticated attackers, with contributor-level access and…
*-2.4.0
2.4.1
25/02/2026
PDF.js < 4.2.67 – Arbitrary JavaScript Execution
PDF.js is vulnerable to Arbitrary JavaScript Execution in versions prior to 4.2.67. This is due to a missing type check when handling fonts. This makes it possible for authenticated attackers, with contributor-level or above permissions, to execute arbitrary…
*-2.1.21
2.1.22
20/05/2024
PDF Poster – PDF Embedder Plugin for WordPress <= 2.1.17 – Reflected Cross-Site Scripting
The PDF Poster – PDF Embedder Plugin for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.1.17 due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.1.17
2.1.18
24/01/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.