Unknown BSK PDF Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown BSK PDF Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2026-91074unknownbsk pdf manager
EPSS score
0.23%
The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with contributor-level access and above to perform SQL injection attacks and read sensitive data such as administrator password hashes from the database.7.2CVE-2021-24860bannerskybsk pdf manager+2
EPSS score
1.32%
The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading to a SQL injection issue