PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer

PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer has a vendor fix available, so running the current release closes it.

All of these findings were reported by sl4x0. PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-12124

PDFDraft <= 1.1.0 - Missing Authorization to Unauthenticated Sensitive PDF Disclosure via 'slug' Parameter

Read the full analysis

Vulnerability Records

1 records
PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer banner
Latestv1.1.1

PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer

wpeverest

Author

wpeverest

5.0(1)
100/100
Last Updated
2026-07-24 (2mo ago)
Active Installs
100+
Downloads
2,998
Requires WP
6.4.0+
Requires PHP
7.4.0+
Tested up to
WP 7.0.4
Created
2026-05-08 (4mo ago)

A PDF builder, PDF generator, and PDF embedder for WordPress — design, generate, and publish professional documents with no coding required. Every other WordPress PDF plugin makes you compromise — fixed templates, rigid layouts, output that never quite looks right. PDFDraft gives you a free-form canvas where you place anything, anywhere, and the result looks exactly the way you designed it. Drop in a smart tag and it stops being a static document entirely. Our PDF generator auto-fills it with real WordPress data — names, emails, post titles, site details — personalized for every single WordPress user. ⚡ Quick Links: Explore all features See what you can build 🏗️ PDF Builder Features: Free-canvas drag & drop PDF builder: Place text, images, and tables anywhere on the canvas with pixel-perfect precision. Smart Tags and Dynamic Fields: Add dynamic fields to your PDF for WordPress data like post title, post meta, author, user details, site name, and site URL using smart tags. Typography controls: Customize font, size, weight, line height, and letter spacing for every text element. Template Library: Start quickly with professionally designed PDF templates for certificates, invitations, invoices and more. Brand Customization: Control fonts, colors, backgrounds, and logo placement in the PDF. Print-Ready Output: Produce clean, crisp PDFs that look professional on screen and on paper. ⚙️ PDF Generator Features: Instant PDF Generation: Generate PDFs immediately when content is ready, with no manual server setup. Dynamic Smart Tags: Pull any WordPress data field into any part of a PDF document automatically. Runs locally: All PDF generation happens on your WordPress server — no data is ever sent to third-party services. 📄 PDF Embedder & Embed Options Multiple Embed Options: Show PDFs with an inline viewer, download button, shortcode, or block. Gutenberg blocks included: Embed a PDF inline viewer or add a download button anywhere in your content using native WordPress blocks. Shortcode support: Embed your PDF or download link anywhere shortcodes are accepted — no page builder required. 🎯 What You Can Build with PDFDraft Course Creators: Generate completion certificates with learner and course details Event Organizers: Create personalized invitation PDFs for each guest using dynamic smart tags Blogs and Content Sites: Convert posts and pages into branded downloadable PDFs Awards & recognition documents: One template, unlimited personalised outputs Anything you can design: The free canvas means no limits on what you build 👥 Who Uses PDFDraft? For personalisation — Course creators, educators, and membership site owners who need every PDF to feel made for that specific person. For automation — Site owners and publishers who want to design once and have PDFs generate automatically for every post, user, or event. For power users — WordPress builders and developers who want to pull any data field into any part of a PDF without writing custom code. 🚀 Quick Setup – Under 2 Minutes Install and activate PDFDraft from your WordPress dashboard. Choose a PDF template from the library or start from a blank canvas. Design your layout with the visual drag-and-drop builder. Add smart tags to auto-fill data from WordPress into your PDF. Publish and generate your PDF. External Services PDFDraft does not connect to external services. PDF generation runs locally on your WordPress site with no data sent to third-party servers. Coming soon PDFDraft is actively growing. A WooCommerce addon for automated invoices, packing slips, and order PDFs is currently in development and coming soon.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C