WordPress security by component
BSK PDF Manager
Plugin description
BSK PDF Manager is a WordPress component with 7 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 7.2.
Plugin slug:
bsk-pdf-managerLatest vulnerability
CVE-2026-65528: BSK PDF Manager: Cross-site scripting
BSK PDF Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.8.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-65528
BSK PDF Manager: Cross-site scripting
BSK PDF Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 3.8.
|
> 3.8 |
CVE6.5
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39686
BSK PDF Manager: A security weakness
BSK PDF Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.7.2.
|
> 3.7.2 |
CVE5.3
NVDPending
|
| Dec 12, 2025 |
CVE-2025-4970
BSK PDF Manager: Cross-site scripting
BSK PDF Manager is affected by cross-site scripting. Exploitation requires at least administrator-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.5
NVDPending
|
| Jul 20, 2024 |
CVE-2024-38767
BSK PDF Manager: Cross-site scripting
BSK PDF Manager is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 25, 2023 |
CVE-2023-5110
BSK PDF Manager: Cross-site scripting
BSK PDF Manager is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Nov 29, 2021 |
CVE-2021-24860
BSK PDF Manager: SQL injection
BSK PDF Manager is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVD7.2
|
| Jul 14, 2014 |
CVE-2014-4944
Bsk Pdf Manager: SQL injection
Bsk Pdf Manager is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVD6.5
|