WordPress security by component

Embed PDF for WPForms

Plugin description

Embed PDF for WPForms is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 19, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: embed-pdf-wpforms

Latest vulnerability

CVE-2025-10647: Embed PDF for WPForms: Dangerous file upload

Embed PDF for WPForms is affected by dangerous file upload. Exploitation requires at least subscriber-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedSep 19, 2025

Safe version guidanceSee mitigation notes

		Safe version
Sep 19, 2025	CVE-2025-10647 Embed PDF for WPForms: Dangerous file upload Embed PDF for WPForms is affected by dangerous file upload. Exploitation requires at least subscriber-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.8 NVDPending