WordPress plugin
Print, PDF & Email by PrintFriendly security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Print, PDF & Email by PrintFriendly vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via 'content_position_css' Parameter ≤5.5.10Update to 5.5.11 | CVE-2026-9738 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via settings ≤5.5.1Update to 5.5.2 | CVE-2023-25032 | |
| Medium5.5 | Authenticated (Admin+) Cross-Site Scripting <5.2.3Update to 5.2.3 | CVE-2022-0663 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via 'content_position_css' Parameter
≤5.5.10Update to 5.5.11
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via settings
≤5.5.1Update to 5.5.2
- Medium5.5Authenticated (Admin+) Cross-Site Scripting
<5.2.3Update to 5.2.3
Print, PDF & Email by PrintFriendly: common questions
Does Print, PDF & Email by PrintFriendly have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Print, PDF & Email by PrintFriendly: 3 medium. None are known to affect version null.
How do I check which version of Print, PDF & Email by PrintFriendly I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Print, PDF & Email by PrintFriendly vulnerability?
CVE-2026-9738, published Jul 10, 2026: Print, PDF, Email by PrintFriendly <= 5.5.10 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'content_position_css' Parameter. Severity: Medium (CVSS 4.4).
Is any Print, PDF & Email by PrintFriendly vulnerability listed in CISA KEV?
No. None of the known Print, PDF & Email by PrintFriendly vulnerabilities is currently listed in the CISA KEV catalog.
