Threat Database

Threat Entry Updated 2026-06-17

Pdf Poster - Broken Access Control (CVE-2026-27416)

Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDF Poster: from n/a through 2.4.1.

PLUGIN Pdf Poster

CVE-2026-27416

MEDIUM CVSS 5.3 2026-05-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Pdf Poster - Cross-Site Scripting (XSS) (CVE-2024-13362)

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

PLUGIN Pdf Poster

CVE-2024-13362

MEDIUM CVSS 6.1 2026-05-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Pdf Poster - Broken Access Control (CVE-2026-32416)

Missing Authorization vulnerability in bPlugins PDF Poster pdf-poster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Poster: from n/a through

PLUGIN Pdf Poster

CVE-2026-32416

MEDIUM CVSS 5.4 2026-03-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Pdf Poster - Cross-Site Scripting (XSS) (CVE-2024-23508)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poster – PDF Embedder Plugin for WordPress allows Reflected XSS.This issue affects PDF Poster – PDF Embedder Plugin for WordPress: from n/a through 2.1.17.

PLUGIN Pdf Poster

CVE-2024-23508

HIGH CVSS 7.1 2024-01-31

Risk Score

Open Full Technical Breakdown