PDF Creator Lite
PDF Creator Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for PDF Creator Lite has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. PDF Creator Lite is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.
CVE-2025-49341PDF Creator Lite <= 1.2 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

PDF Creator Lite
Author
Alex Furr
PDF Creator Lite makes on-the-fly PDF documents of selected parts of your site. It has 2 main uses: Use it on pages and posts so your readers can download PDFs: Basic Use: Just put the [pdf-lite] shortcode into your page or post and visitors can simply click a button to get a PDF document of that page. More Control: Use the shortcode parameters to choose specific pages, categories, or the entire site. Here’s a few examples: Makes a PDF of all posts: [pdf-lite allposts=”true”] Makes a PDF of all pages: [pdf-lite allpages=”true”] Makes a PDF of selected pages/posts (use post ids or slugs): [pdf-lite page=”3, 28, my-post-slug”] Makes a PDF of posts in the categories ‘music’ and ‘food’: [pdf-lite cat=”music, food”] Changes the download icon: [pdf-lite icon=”3″] See the full list of parameters on the settings page ( Dashboard->Tools->PDF Creator ). Use it as an admin tool to create customised PDFs of selected or all site pages (not posts): Customise the colours and fonts Simple and easy to use Go to the settings page ( Dashboard->Tools->PDF Creator ) to make your PDF. This plugin is supported by the University of Southampton
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C