Product

Save as PDF Plugin (<= 4.6.1)

1 brief RSS

CVE-2026-92807: Arbitrary Function Invocation in Save as PDF Plugin for WordPress

The Save as PDF Plugin for WordPress up to version 4.6.1 is vulnerable to arbitrary function invocation via the pdf_created_callback shortcode attribute, allowing authenticated Contributor-level users to trigger sensitive data disclosure.

Save as PDF Plugin web-application-vulnerability wordpress cve-2026-92807

1r 1t 1c 8h ago