← WordPress Vulnerabilities
WordPress security by component

Legoeso PDF Manager

Legoeso PDF Manager is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 20, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: legoeso-pdf-manager

CVE-2025-0866: Legoeso PDF Manager: SQL injection

Legoeso PDF Manager is affected by SQL injection. Exploitation requires at least author-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedFeb 20, 2025
Safe version guidanceSee mitigation notes
Safe version
Feb 20, 2025 CVE-2025-0866
Legoeso PDF Manager: SQL injection
Legoeso PDF Manager is affected by SQL injection. Exploitation requires at least author-level access. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.5
NVDPending