PDF 2 Post
PDF 2 Post has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Code Injection, behind 1 of the records (100%).
The one issue recorded for PDF 2 Post has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Le Ngoc Anh. PDF 2 Post is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.2.26.
CVE-2025-32583PDF 2 Post <= 2.4.0 - Authenticated (Subscriber+) Remote Code Execution
Read the full analysisVulnerability Records
PDF 2 Post
Author
termel
Mass convert PDF documents to WP posts, by: extracting all text data and adding it to post content extract all images included in PDF and attach them to post automatically add featured image create gallery inside post content from all images extracted Be carefull, you NEED to have installed on your server the following: ZipArchive PDFMiner pdfimages Works on multisite installs. >> Test your document here << If you need a more professional solution, we now have a premium InDesign to WordPress plugin: >> InDesign to WordPress << ToDo Will need to be upgraded with : https://github.com/pdfminer/pdfminer.six
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C