- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/25/2026, BSK PDF Manager recorded 1 security vulnerability in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of BSK PDF Manager and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-108498WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-65528WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-39686WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerabilityCVE-2025-4970BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File UploadCVE-2023-5110BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-108498WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published10/15/2026 | SeverityHigh |
CVE-2026-65528WordPress BSK PDF Manager plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Published07/23/2026 | SeverityMedium |
CVE-2026-39686WordPress BSK PDF Manager plugin <= 3.7.2 - Sensitive Data Exposure vulnerability | Exploitation statusNot exploited | FixYes | Published04/08/2026 | SeverityMedium |
CVE-2025-4970BSK PDF Manager <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload | Exploitation statusNot exploited | FixYes | Published12/12/2025 | SeverityMedium |
CVE-2023-5110BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | Exploitation statusNot exploited | FixYes | Published10/24/2023 | SeverityMedium |
5 Results | Page 1 of 1