BSK PDF Manager

BSK PDF Manager has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; 9 are fixed and 2 remain unpatched as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (64%). Other recurring categories include SQL Injection, Exposure Of Sensitive Information To An Unauthorized Actor.

9 of the records (82%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

11 independent researchers contributed these findings, one record each. BSK PDF Manager is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage82%
Open

2

Fixed

9

Get automatic notifications for all BSK PDF Manager vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-108498

BSK PDF Manager <= 3.8.1 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

11 records
2026-10-14 00:00CVE-2026-91074
6.5
Medium
Mohamed BassiaNo
2026-10-13 10:51CVE-2026-108498
7.2
High
Masaya MoritaNo
2026-07-23 00:00CVE-2026-65528
6.4
Medium
lucYes
2026-02-22 00:00CVE-2026-39686
5.3
Medium
Doan Dinh Van (d52v)Yes
2025-12-11 00:00CVE-2025-4970
5.5
Medium
rajanhoyrYes
2024-07-15 00:00CVE-2024-38767
6.4
Medium
LVT-tholv2kYes
2024-05-20 00:00CVE-2024-4367
6.4
Medium
Colin XuYes
2023-10-23 00:00CVE-2023-5110
6.4
Medium
István MártonYes
2021-11-01 00:00CVE-2021-24860
7.2
High
ZhongFu SuYes
2014-08-01 00:00CVE-2014-4944
9.9
Critical
Claudio VivianiYes
Showing 1–10 of 11 reports
Plugin Profile
Latestv3.8.2

BSK PDF Manager

bannersky

Author

bannersky

4.5(46)
90/100
Last Updated
2026-10-26 (2d ago)
Active Installs
7,000+
Downloads
461,032
Requires WP
5.3+
Requires PHP
0+
Tested up to
WP 7.1.3
Created
2013-03-08 (14y ago)

This plugin was first released in 2013 and has over 10,000 active installs. Many webmasters use it to manage thousands of PDFs/documents. Although this plugin is called “PDF Manager”, it can also manage other files like: pdf, zip, gz, rar, png, jpg, jpeg, gif, tif, tiff, swf, docx, xlsx, pptx, csv, crtfsv, Pages, numbers, keynotes, ie. It helps you easily manage PDFs/documents in WordPress and display them on the page very conveniently. You can upload and display by category or display a special PDF/file. Each PDF/document can have its own permalink, which means you can share the permalink with your clients, and you can update the PDF/document version at any time without worrying that clients can’t find the file. It’s easy to use, you just need to add the shortcode to the page/post you want to display. Then it will show the PDF/file link in your page/post. Starting with version 3.5 BSK PDF Manager uses Mozilla’s PDF.js to display PDF content. When this feature is enabled, all PDF documents’ content will be displayed in the browser when a visitor clicks a link to the document. This means that the PDF document can be displayed on the visitor’s screen regardless of the platform the visitor is using, PC, Mac, iPhone, iPad, Android… We also have a pro version that provides more features for some administrators with advanced requirements. Such as featured images for PDF/document, thumbnail generation from PDF, notifications, bulk add via FTP, bulk add via media… For all features in the pro version, visit https://www.bannersky.com/bsk-pdf-manager/ for documentation. Check out the demo: https://demo.bannersky.com/bsk-pdf-manager-demos/ , please note that the demo site uses the Pro version. We welcome your valuable ideas and features you need for the future version.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C