CyberRota Analysis
AI-GeneratedThe PDFDraft plugin for WordPress is vulnerable due to a lack of proper capability checks, allowing unauthenticated attackers to access and download sensitive template PDFs that may contain personally identifiable information (PII), invoices, and certificates. This vulnerability affects versions up to 1.1.0 and poses a medium risk to organizations using the plugin, particularly those handling sensitive customer data. WordPress administrators utilizing this plugin should prioritize applying updates or implementing mitigations to prevent potential data breaches.
Original NVD Description
The PDFDraft – Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the serveTemplatePdfAjax() function and the serveTemplatePdf() REST route (which is registered with `permission_callback => '__return_true'`) in versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to download stored template PDFs — which may contain customer PII, invoice, order, and certificate data — by requesting the publicly registered admin-ajax action `pdfdraft_embed_pdf` or the REST endpoint `/wp-json/pdfdraft/v1/embed-pdf/templates/{slug}/pdf` with a known or guessable design slug, bypassing the plugin's own .