CVE-2026-92807 | PDFCrowd Save as PDF Plugin up to 4.6.1 on WordPress Shortcode save_as_pdf_pdfcrowd pdf_created_callback code injection

September 19, 2026 Yanac

A vulnerability was found in PDFCrowd Save as PDF Plugin up to 4.6.1 on WordPress and classified as critical. This affects the function save_as_pdf_pdfcrowd of the component Shortcode Handler. The manipulation of the argument pdf_created_callback results in code injection.

This vulnerability was named CVE-2026-92807. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More