[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI9fXkzBGv99NQOZmjpbD77_xc27qs1ulz_zdEBrBUHU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":48,"crawl_stats":38,"alternatives":56,"analysis":57,"fingerprints":205},"pdf-catalog-woocommerce","PDF Catalog for WooCommerce","3.0","theme funda","https:\u002F\u002Fprofiles.wordpress.org\u002Fgravitymaster97\u002F","\u003Cp>\u003Cstrong>PDF Catalog for WooCommerce\u003C\u002Fstrong> allows you to generate and download WooCommerce product catalogs in PDF format with a single click.\u003C\u002Fp>\n\u003Cp>Customers can download:\u003Cbr \u002F>\n– Entire shop product catalogs\u003Cbr \u002F>\n– Category-wise product catalogs\u003Cbr \u002F>\n– Single product PDF catalogs\u003C\u002Fp>\n\u003Cp>This plugin is ideal for wholesalers, B2B stores, offline selling, product presentations, and printable catalogs.\u003C\u002Fp>\n\u003Cp>🔗 Demo: https:\u002F\u002Fcodesmade.com\u002Fdemo\u002Fproduct\u002Falbum\u002F\u003Cbr \u002F>\n🔗 Support: https:\u002F\u002Fwww.codesmade.com\u002Fcontact-us\u002F\u003Cbr \u002F>\n🔗 Pro Version: https:\u002F\u002Fwww.codesmade.com\u002Fstore\u002Fpdf-catalog-woocommerce-pro\u002F\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cp>✔ One-Click Installation – Quick and simple setup\u003Cbr \u002F>\n✔ Shop & Category PDF Export – Generate PDFs for shop or specific categories\u003Cbr \u002F>\n✔ Single Product PDF – Export individual product pages\u003Cbr \u002F>\n✔ Grid & List Layout Options – Choose your preferred layout style\u003Cbr \u002F>\n✔ Design Customization – Adjust font size, alignment, and colors\u003Cbr \u002F>\n✔ Category Group Display – Show products grouped by categories\u003Cbr \u002F>\n✔ Exclude Options – Hide out-of-stock items, specific products, categories, or user roles\u003Cbr \u002F>\n✔ Image Width Control – Adjust product image size\u003Cbr \u002F>\n✔ Custom PDF File Name – Define your own PDF naming structure\u003Cbr \u002F>\n✔ Hide\u002FShow Controls – Toggle title, images, description, SKU, price, categories, tags, and stock\u003Cbr \u002F>\n✔ RTL & LTR Support – Fully compatible with multilingual stores\u003Cbr \u002F>\n✔ Custom Product Meta Fields – Include additional custom fields in the PDF\u003Cbr \u002F>\n✔ Multiple Button Locations – Display download button where needed\u003C\u002Fp>\n\u003Ch3>Shortcodes\u003C\u002Fh3>\n\u003Cp>Single Product PDF:\u003Cbr \u002F>\n[gmwcp_single_product]\u003Cbr \u002F>\n[gmwcp_single_product id=”{product_id}”]\u003C\u002Fp>\n\u003Cp>Shop \u002F Category PDF:\u003Cbr \u002F>\n[gmwcp_shop_product]\u003Cbr \u002F>\n[gmwcp_shop_product category_id=”{category_id}”]\u003C\u002Fp>\n\u003Cp>You can also generate via URL:\u003Cbr \u002F>\n?action=catelog_single&product_id={ID}\u003C\u002Fp>\n\u003Ch3>PRO Version Features\u003C\u002Fh3>\n\u003Cp>Upgrade to unlock advanced catalog customization:\u003C\u002Fp>\n\u003Cp>★ Custom Header Design\u003Cbr \u002F>\n★ Custom Footer Design\u003Cbr \u002F>\n★ Gallery & Attribute Toggle Controls\u003Cbr \u002F>\n★ Translation Support for Keywords\u003Cbr \u002F>\n★ Page Break After Each Product\u003Cbr \u002F>\n★ Advanced Layout Customization\u003C\u002Fp>\n\u003Ch3>Why Use PDF Catalog for WooCommerce?\u003C\u002Fh3>\n\u003Cp>• Share product catalogs offline\u003Cbr \u002F>\n• Send PDF catalogs to customers via email\u003Cbr \u002F>\n• Create printable WooCommerce catalogs\u003Cbr \u002F>\n• Ideal for wholesalers and B2B stores\u003Cbr \u002F>\n• Professional product presentation\u003C\u002Fp>\n\u003Cp>Your WooCommerce store becomes more powerful with downloadable PDF catalogs that include images, pricing, SKU, attributes, and descriptions.\u003C\u002Fp>\n","Generate dynamic PDF catalogs for WooCommerce products. Allow customers to download shop, category, or single product catalogs including images, price …",1000,22748,84,23,"2026-02-12T02:28:00.000Z","6.8.5","5.8","7.2",[20,21,22,23,24],"pdf-catalog-generator","product-catalog-pdf","woocommerce-export-pdf","woocommerce-pdf-catalog","woocommerce-product-pdf","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpdf-catalog-woocommerce.zip",99,1,0,"2025-01-07 00:00:00","2026-03-15T15:16:48.613Z",[33],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":6,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":47},"CVE-2025-22809","pdf-catalog-woocommerce-authenticated-contributor-stored-cross-site-scripting","PDF Catalog Woocommerce \u003C= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting","The PDF Catalog Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",null,"\u003C=2.0","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-01-14 15:02:46",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F6f3fd683-9522-4e41-9ae7-751837c1844f?source=api-prod",8,{"slug":49,"display_name":7,"profile_url":8,"plugin_count":50,"total_installs":51,"avg_security_score":52,"avg_patch_time_days":53,"trust_score":54,"computed_at":55},"gravitymaster97",26,12040,98,85,87,"2026-04-03T20:11:50.473Z",[],{"attackSurface":58,"codeSignals":169,"taintFlows":193,"riskAssessment":194,"analyzedAt":204},{"hooks":59,"ajaxHandlers":118,"restRoutes":119,"shortcodes":158,"cronEvents":167,"entryPointCount":65,"unprotectedCount":168},[60,66,70,75,79,83,87,91,95,98,100,104,108,112,115],{"type":61,"name":62,"callback":63,"file":64,"line":65},"action","admin_menu","GMWCP_admin_menu","includes\\GMWCP_Admin.php",9,{"type":61,"name":67,"callback":68,"file":64,"line":69},"admin_enqueue_scripts","GMWCP_admin_script",10,{"type":71,"name":72,"callback":73,"file":64,"line":74},"filter","woocommerce_product_data_tabs","GMWCP_custom_product_tabs",11,{"type":71,"name":76,"callback":77,"file":64,"line":78},"woocommerce_product_data_panels","GMWCP_custom_product_panels",12,{"type":61,"name":80,"callback":81,"file":64,"line":82},"woocommerce_process_product_meta","GMWCP_custom_save",13,{"type":61,"name":84,"callback":85,"file":64,"line":86},"init","GMWCP_init",14,{"type":61,"name":88,"callback":89,"file":90,"line":47},"rest_api_init","GMWCP_rest_api_init","includes\\GMWCP_API.php",{"type":61,"name":88,"callback":92,"file":93,"line":94},"register_routes","includes\\GMWCP_API_Frontend.php",7,{"type":61,"name":84,"callback":96,"file":97,"line":94},"GMWCP_default","includes\\GMWCP_Cron.php",{"type":61,"name":84,"callback":85,"file":99,"line":74},"includes\\GMWCP_Frontend.php",{"type":61,"name":101,"callback":102,"priority":69,"file":99,"line":103},"woocommerce_product_meta_start","woo_comman_single_button",22,{"type":61,"name":105,"callback":102,"priority":106,"file":99,"line":107},"woocommerce_single_product_summary",15,25,{"type":61,"name":109,"callback":110,"priority":69,"file":99,"line":111},"woocommerce_before_shop_loop","woo_comman_shop_button",33,{"type":61,"name":113,"callback":110,"priority":69,"file":99,"line":114},"woocommerce_after_shop_loop",36,{"type":61,"name":116,"callback":102,"file":117,"line":65},"wp","includes\\GMWCP_PDF.php",[],[120,127,132,137,143,147,153],{"namespace":121,"route":122,"methods":123,"callback":125,"permissionCallback":126,"file":90,"line":82},"gmwcp\u002Fv1","\u002Fsave-settings",[124],"POST","GMWCP_save_multiple_settings","GMWCP_permission_callback",{"namespace":121,"route":128,"methods":129,"callback":130,"permissionCallback":126,"file":90,"line":131},"\u002Fsave-customfield",[124],"GMWCP_save_custom_field",19,{"namespace":121,"route":133,"methods":134,"callback":135,"permissionCallback":126,"file":90,"line":136},"\u002Fdelete-customfield",[124],"GMWCP_delete_custom_field",24,{"namespace":121,"route":138,"methods":139,"callback":141,"permissionCallback":126,"file":90,"line":142},"\u002Fget-settings",[140],"GET","GMWCP_get_settings",31,{"namespace":121,"route":144,"methods":145,"callback":146,"permissionCallback":126,"file":90,"line":114},"\u002Fmoreplugin",[140],"GMWCP_moreplugin",{"namespace":148,"route":149,"methods":150,"callback":151,"permissionCallback":152,"file":93,"line":74},"gmwcp-pdf\u002Fv1","\u002Fproducts",[140],"gmwcp_get_woocommerce_products","__return_true",{"namespace":148,"route":154,"methods":155,"callback":156,"permissionCallback":152,"file":93,"line":157},"\u002Fsetting",[140],"gmwcp_get_setting",17,[159,163],{"tag":160,"callback":161,"file":99,"line":162},"gmwcp_single_product","gmwcp_single_product_shortcode",39,{"tag":164,"callback":165,"file":99,"line":166},"gmwcp_shop_product","gmwcp_shop_product_shortcode",40,[],2,{"dangerousFunctions":170,"sqlUsage":171,"outputEscaping":173,"fileOperations":29,"externalRequests":29,"nonceChecks":187,"capabilityChecks":28,"bundledLibraries":188},[],{"prepared":29,"raw":29,"locations":172},[],{"escaped":106,"rawEcho":174,"locations":175},5,[176,179,181,183,185],{"file":99,"line":177,"context":178},52,"raw output",{"file":99,"line":180,"context":178},57,{"file":117,"line":182,"context":178},37,{"file":117,"line":184,"context":178},49,{"file":117,"line":186,"context":178},124,4,[189],{"name":190,"version":191,"knownCves":192},"Select2","3.4.8",[],[],{"summary":195,"deductions":196},"The \"pdf-catalog-woocommerce\" v3.0 plugin exhibits a generally good security posture with strong adherence to secure coding practices in several key areas. The complete absence of dangerous functions, raw SQL queries, file operations, and external HTTP requests is commendable.  Furthermore, the robust use of prepared statements for all SQL queries significantly mitigates SQL injection risks. The presence of nonces and capability checks, while not exhaustive across all entry points, indicates an awareness of authentication and authorization best practices.  However, a notable concern arises from the REST API, where 2 out of 7 routes lack permission callbacks. This creates an unprotected attack surface that could be exploited if these endpoints handle user-supplied data without proper authorization checks, potentially leading to unauthorized actions or data leakage.\n\nThe vulnerability history, while showing no currently unpatched CVEs, does reveal a past \"Cross-site Scripting\" vulnerability. This, coupled with the 75% output escaping rate, suggests a potential for lingering XSS vulnerabilities if not all outputs are meticulously sanitized. The bundled Select2 v3.4.8 library is also outdated, which could represent an indirect attack vector if vulnerabilities are discovered in that specific version. Overall, the plugin has strengths in its core data handling but requires attention to its REST API authorization and output sanitization to achieve a fully secure state.",[197,199,201],{"reason":198,"points":69},"REST API routes without permission callbacks",{"reason":200,"points":187},"Outdated bundled library (Select2 v3.4.8)",{"reason":202,"points":203},"25% of output not properly escaped",6,"2026-03-16T19:00:32.635Z",{"wat":206,"direct":215},{"assetPaths":207,"generatorPatterns":210,"scriptPaths":211,"versionParams":212},[208,209],"\u002Fwp-content\u002Fplugins\u002Fpdf-catalog-woocommerce\u002Fbuild\u002Fadmin\u002Fadmin.js","\u002Fwp-content\u002Fplugins\u002Fpdf-catalog-woocommerce\u002Fbuild\u002Fadmin\u002Fadmin.css",[],[208],[213,214],"pdf-catalog-woocommerce\u002Fbuild\u002Fadmin\u002Fadmin.js?ver=1.0","pdf-catalog-woocommerce\u002Fbuild\u002Fadmin\u002Fadmin.css?ver=1",{"cssClasses":216,"htmlComments":218,"htmlAttributes":219,"restEndpoints":221,"jsGlobals":227,"shortcodeOutput":229},[217],"gmwcp-react-admin-style",[],[220],"id=\"GMWCP-admin-root\"",[222,223,224,225,226],"\u002Fwp-json\u002Fgmwcp\u002Fv1\u002Fmoreplugin","\u002Fwp-json\u002Fgmwcp\u002Fv1\u002Fget-settings","\u002Fwp-json\u002Fgmwcp\u002Fv1\u002Fsave-settings","\u002Fwp-json\u002Fgmwcp\u002Fv1\u002Fsave-customfield","\u002Fwp-json\u002Fgmwcp\u002Fv1\u002Fdelete-customfield",[228],"gmwcp_wp_ajax",[]]