Export WordPress Pages to Static HTML & PDF — Static Site Export
Export WordPress Pages to Static HTML & PDF — Static Site Export has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (33%). Other recurring categories include Missing Authorization, Exposure Of Sensitive Information To An Unauthorized Actor.
Every one of the 6 issues recorded for Export WordPress Pages to Static HTML & PDF — Static Site Export has a vendor fix available, so running the current release closes all known holes.
6 independent researchers contributed these findings, one record each. Export WordPress Pages to Static HTML & PDF — Static Site Export is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-11693Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File
Read the full analysisVulnerability Records

Export WordPress Pages to Static HTML & PDF — Static Site Export
Author
recorp
Export WordPress Pages to Static HTML & PDF lets you convert WordPress pages, posts, and custom post types into clean static HTML files you can host anywhere. Generate portable static versions of your WordPress content for faster performance, improved security, and easy sharing. Choose exactly what you want to export — a single post, selected pages, or specific custom post types. Each export produces a standalone HTML package with organized assets, making it easy for developers, clients, or teams to use the files without a WordPress installation. Perfect for creating static versions of WordPress pages, archiving content, delivering client-ready HTML pages, or generating portable website packages. Common use cases Deliver client-ready static HTML pages without giving WordPress access Archive marketing or campaign landing pages Create lightweight static versions of WordPress pages Generate offline backups of important content Share portable HTML packages with developers or teams Export content for static hosting platforms The plugin focuses on precision exporting, allowing you to control exactly which content is exported, how assets are collected, and how the final static package is structured. PDF export support is also planned, allowing you to generate print-ready documents directly from WordPress content. Features Export WordPress pages to static HTML — Export individual pages, posts, or custom post types as clean standalone HTML files. Selective content export — Export a single item or hand-pick exactly which pages, posts, or custom post types you want to include. Free export limit — Free version allows exporting up to 5 posts or pages per run (upgrade to Pro for unlimited exports). All WordPress post statuses — Export Published, Draft, Private, Pending, or Scheduled content. Role-based page rendering — Export pages as viewed by a specific WordPress user role (useful for membership or gated content previews). Developer-friendly asset structure — Exported packages organize assets into /images, /css, and /js directories. Flatten parent URLs — Option to export parent posts directly as postname.html at the root of the export package. Preview and download exports — Browse generated static HTML files inside WordPress before downloading them as a ZIP archive. Direct FTP / SFTP deployment — Upload exported static files directly to a remote server from the export panel. Reliable background exports — Export jobs run in the background with pause, resume, cancel, and retry controls. Smart asset collection modes — Choose Strict, Hybrid (recommended), or Full asset discovery for exporting site resources. System Status diagnostics — Built-in environment checks (PHP version, permissions, REST API) help detect issues before exporting. Export buttons via shortcodes — Add export buttons to posts or pages using simple shortcodes. Translation ready — Fully internationalized and ready for localization. PDF export (returning soon) — Optional PDF generation with customizable templates (headers, footers, fonts) planned for a future release. Pro Features All Pages / All Posts export — Bulk export every page or post in one run Full Site export — Complete WordPress-to-static-HTML conversion (URL discovery & crawling) External Site Export — Mirror and export any external URL as a clean static package AWS S3 deployment — Upload exports directly to S3 buckets Priority support & updates Your First Export Tools → Export WP Pages to Static HTML Choose Export Scope (Custom up to 5 items free; Pro: All Pages / All Posts / Full Site / External Site) Select items, choose Post Status and Role (optional), pick Asset Mode Start Export → Preview → Download ZIP or Upload to remote Shortcodes [export_html_button] : Inserts an “Export to HTML” button (visible to allowed roles) [generate_pdf_button] : Inserts a “Generate PDF” button (PDF feature planned to return)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C