mPDF add-on for RTL and Unicode Support Security & Risk Analysis

wordpress.org/plugins/mpdf-addon-for-pdf-invoices

RTL and Unicode support add-on for WebToffee WooCommerce Gift Cards, WebToffee WooCommerce Request a Quote and WooCommerce PDF Invoices, Packing Slips …

4K active installs v1.2.8 PHP 5.6+ WP 3.0.1+ Updated Mar 4, 2026
gift-cardmpdfpdf-invoicertl-supportwoocommerce-invoice
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is mPDF add-on for RTL and Unicode Support Safe to Use in 2026?

Generally Safe

Score 100/100

mPDF add-on for RTL and Unicode Support has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "mpdf-addon-for-pdf-invoices" v1.2.8 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The complete absence of known CVEs and a history of no recorded vulnerabilities suggest a commitment to security or a lack of past exploitation. The code analysis reveals no critical or high-severity issues, with a good percentage of outputs being properly escaped and all SQL queries utilizing prepared statements. The limited attack surface, with only one AJAX handler that appears to have authentication checks (though capability checks are noted as 0), further contributes to a positive security assessment.

Key Concerns

  • No capability checks found for entry points
  • Bundled outdated library (TCPDF)
Vulnerabilities
None known

mPDF add-on for RTL and Unicode Support Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

mPDF add-on for RTL and Unicode Support Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
1 prepared
Unescaped Output
6
46 escaped
Nonce Checks
2
Capability Checks
0
File Operations
3
External Requests
1
Bundled Libraries
1

Bundled Libraries

TCPDF

SQL Query Safety

100% prepared1 total queries

Output Escaping

88% escaped52 total outputs
Attack Surface

mPDF add-on for RTL and Unicode Support Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_wtmpdf_submit_uninstall_reasonincludes\class-wt-mpdf-uninstall-feedback.php:21
WordPress Hooks 11
actioninitincludes\class-wt-mpdf-review_request.php:53
actionadmin_noticesincludes\class-wt-mpdf-review_request.php:55
actionadmin_print_footer_scriptsincludes\class-wt-mpdf-review_request.php:56
actionadmin_footerincludes\class-wt-mpdf-uninstall-feedback.php:20
actionbefore_woocommerce_initwt-woocommerce-packing-list-mpdf.php:35
actionplugins_loadedwt-woocommerce-packing-list-mpdf.php:157
filterwt_pklist_mpdf_get_lib_infowt-woocommerce-packing-list-mpdf.php:173
filterwt_pklist_alter_pdf_librarieswt-woocommerce-packing-list-mpdf.php:191
filterwf_pklist_enable_product_table_columns_reversewt-woocommerce-packing-list-mpdf.php:197
filterwf_pklist_is_rtl_for_pdfwt-woocommerce-packing-list-mpdf.php:199
filterwt_pklist_alter_final_order_template_htmlwt-woocommerce-packing-list-mpdf.php:202
Maintenance & Trust

mPDF add-on for RTL and Unicode Support Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 4, 2026
PHP min version5.6
Downloads61K

Community Trust

Rating100/100
Number of ratings16
Active installs4K
Developer Profile

mPDF add-on for RTL and Unicode Support Developer Profile

WebToffee

17 plugins · 377K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
155 days
View full developer profile
Detection Fingerprints

How We Detect mPDF add-on for RTL and Unicode Support

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mpdf-addon-for-pdf-invoices/assets/css/wt-mpdf-admin.css/wp-content/plugins/mpdf-addon-for-pdf-invoices/assets/css/wt-mpdf-frontend.css/wp-content/plugins/mpdf-addon-for-pdf-invoices/assets/js/wt-mpdf-admin.js/wp-content/plugins/mpdf-addon-for-pdf-invoices/assets/js/wt-mpdf-frontend.js
Script Paths
/wp-content/plugins/mpdf-addon-for-pdf-invoices/assets/js/wt-mpdf-admin.js/wp-content/plugins/mpdf-addon-for-pdf-invoices/assets/js/wt-mpdf-frontend.js
Version Parameters
mpdf-addon-for-pdf-invoices/assets/css/wt-mpdf-admin.css?ver=mpdf-addon-for-pdf-invoices/assets/css/wt-mpdf-frontend.css?ver=mpdf-addon-for-pdf-invoices/assets/js/wt-mpdf-admin.js?ver=mpdf-addon-for-pdf-invoices/assets/js/wt-mpdf-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
wt-mpdf-settings-wrap
Data Attributes
data-wt-mpdf-nonce
JS Globals
wt_mpdf_admin_paramswt_mpdf_frontend_params
FAQ

Frequently Asked Questions about mPDF add-on for RTL and Unicode Support