CVE-2025-58978

Missing Authorization vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF Generator for WordPress: from n/a through <= 1.5.4.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - audit@patchstack.com

Published

2025-09-09

Last modified

2026-04-28

Weaknesses

CWE-862

Affected products

• Pdf Generator For Wordpress (Wp Swings)

References

• https://patchstack.com/database/Wordpress/Plugin/pdf-generator-for-wp/vulnerability/wordpress-pdf-generator-for-wordpre…