Document Engine – Download Posts as PDF, PDF Embedder, Posts to PDF

Document Engine – Download Posts as PDF, PDF Embedder, Posts to PDF has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Document Engine – Download Posts as PDF, PDF Embedder, Posts to PDF has a vendor fix available, so running the current release closes it.

All of these findings were reported by Peter Thaleikis. Document Engine – Download Posts as PDF, PDF Embedder, Posts to PDF is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Document Engine – Download Posts as PDF, PDF Embedder, Posts to PDF vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-58640

Document Engine <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-09-03 00:00	Document Engine <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Document Engine <= 1.2	`CVE-2025-58640`	6.4 Medium	Peter Thaleikis	Yes

Showing 1–1 of 1 reports

Latestv1.3

Document Engine – Download Posts as PDF, PDF Embedder, Posts to PDF

Author

MatrixAddons

5.0(2)

100/100

Last Updated

2025-08-27 (1y ago)

Active Installs

100+

Downloads

6,907

Requires WP

5.4+

Requires PHP

5.6+

Tested up to

WP 6.8.8

Created

2022-04-12 (5y ago)

WordPress To PDF Plugin | PDF Viewer Block | PDF Embedder Document Engine is WordPress to PDF plugin that convert any post type to PDF format & you can view pdf document with PDF Viewer block. Download Post as PDF, WordPress to PDF, Download as PDF document of any WordPress Post Types, PDF Viewer, PDF Embedder, PDF Block, View PDF on WordPress – Document Engine Features Download PDF of any custom post type Configurable PDF header/footer and main page Custom CSS options for PDF Awesome shortcodes to show hide content etc on pdf document Easy setup process PDF viewer gutenberg block PDF Embedder Premium Features – Document Engine Pro Text Watermark on PDF Image Watermark On PDF Text Watermark Angle Image Watermark size and positions Text/Image Watermark Transparency ( Alpha ) View Document Engine Pro Shortcodes Available Shortcodes For PDF Download Shortcode to show the Download PDF button [document_engine_pdf_button] Shortcode to remove content from the PDF document [document_engine_pdf_remove]Your Hidden Content for PDF goes Here [/document_engine_pdf_remove] Shortcode to Page break on pdf [document_engine_pdf_page_break] Shortcode to show Columns on PDF [document_engine_pdf_columns]Your content for column on PDF document [/document_engine_pdf_columns] Shortcode to Break column on PDF document [document_engine_pdf_column_break] Note: You can use above shortcodes to make more customizable pdf template. Your website appearance will not change by above shortcodes. It just modify the PDF document. PDF Viewer Block You can use PDF viewer block to show any pdf document on your WordPress site

View on WordPress.org