PDF Forms Filler for WPForms Security & Risk Analysis

wordpress.org/plugins/pdf-forms-for-wpforms

Build WPForms from PDF forms. Get PDFs filled automatically and attached to email messages and/or website responses on form submissions.

500 active installs v1.3.2 PHP 5.5+ WP 5.4+ Updated Dec 27, 2025
downloademailformpdfwpforms
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PDF Forms Filler for WPForms Safe to Use in 2026?

Generally Safe

Score 100/100

PDF Forms Filler for WPForms has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "pdf-forms-for-wpforms" plugin v1.3.2 demonstrates a generally strong security posture based on the provided static analysis. All identified entry points (AJAX handlers and cron events) appear to have proper authentication and authorization checks, which is a significant strength. The plugin also exhibits good practices with 100% of its SQL queries using prepared statements and a high percentage of output being properly escaped. The absence of critical or high-severity taint flows and a clean vulnerability history with zero recorded CVEs further contribute to this positive assessment.

Key Concerns

  • 10% of outputs unescaped
  • Bundled library: Select2
Vulnerabilities
None known

PDF Forms Filler for WPForms Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

PDF Forms Filler for WPForms Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
12
109 escaped
Nonce Checks
8
Capability Checks
17
File Operations
19
External Requests
4
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

90% escaped121 total outputs
Attack Surface

PDF Forms Filler for WPForms Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_pdf_forms_for_wpforms_get_attachment_datapdf-forms-for-wpforms.php:75
authwp_ajax_pdf_forms_for_wpforms_query_page_imagepdf-forms-for-wpforms.php:76
authwp_ajax_pdf_forms_for_wpforms_generate_pdf_ninja_keypdf-forms-for-wpforms.php:77
WordPress Hooks 42
actioninitinc\class-tgm-plugin-activation.php:268
filterload_textdomain_mofileinc\class-tgm-plugin-activation.php:269
actioninitinc\class-tgm-plugin-activation.php:272
actionadmin_menuinc\class-tgm-plugin-activation.php:421
actionadmin_headinc\class-tgm-plugin-activation.php:422
filterinstall_plugin_complete_actionsinc\class-tgm-plugin-activation.php:425
filterupdate_plugin_complete_actionsinc\class-tgm-plugin-activation.php:426
actionadmin_noticesinc\class-tgm-plugin-activation.php:429
actionadmin_initinc\class-tgm-plugin-activation.php:430
actionadmin_enqueue_scriptsinc\class-tgm-plugin-activation.php:431
actionload-plugins.phpinc\class-tgm-plugin-activation.php:436
actionswitch_themeinc\class-tgm-plugin-activation.php:439
actionswitch_themeinc\class-tgm-plugin-activation.php:442
actionadmin_initinc\class-tgm-plugin-activation.php:447
actionswitch_themeinc\class-tgm-plugin-activation.php:452
actionload_textdomain_mofileinc\class-tgm-plugin-activation.php:475
filterupgrader_source_selectioninc\class-tgm-plugin-activation.php:889
actionplugins_loadedinc\class-tgm-plugin-activation.php:2112
filtertgmpa_table_data_itemsinc\class-tgm-plugin-activation.php:2236
filterupgrader_source_selectioninc\class-tgm-plugin-activation.php:2977
actionadmin_initinc\class-tgm-plugin-activation.php:3147
actionupgrader_process_completeinc\class-tgm-plugin-activation.php:3242
filterupgrader_post_installinc\class-tgm-plugin-activation.php:3301
filterupgrader_post_installinc\class-tgm-plugin-activation.php:3446
actiontgmpa_registerinc\tgm-config.php:8
filterwpforms_settings_defaultsmodules\pdf-ninja.php:24
filterwpforms_settings_tabsmodules\pdf-ninja.php:25
actionadmin_noticespdf-forms-for-wpforms.php:44
actionplugins_loadedpdf-forms-for-wpforms.php:45
actionpdf_forms_for_wpforms_cronpdf-forms-for-wpforms.php:49
actioninitpdf-forms-for-wpforms.php:68
actionadmin_enqueue_scriptspdf-forms-for-wpforms.php:70
actionadmin_menupdf-forms-for-wpforms.php:79
filterwpforms_save_form_argspdf-forms-for-wpforms.php:81
filterwpforms_smarttags_process_valuepdf-forms-for-wpforms.php:83
actionwpforms_process_entry_savedpdf-forms-for-wpforms.php:87
actionwpforms_process_completepdf-forms-for-wpforms.php:88
filterwpforms_emails_send_email_datapdf-forms-for-wpforms.php:89
actionwpforms_frontend_confirmation_messagepdf-forms-for-wpforms.php:90
filterwpforms_builder_settings_sectionspdf-forms-for-wpforms.php:92
actionwpforms_form_settings_panel_contentpdf-forms-for-wpforms.php:93
filtercron_schedulespdf-forms-for-wpforms.php:95

Scheduled Events 1

pdf_forms_for_wpforms_cron
Maintenance & Trust

PDF Forms Filler for WPForms Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 27, 2025
PHP min version5.5
Downloads11K

Community Trust

Rating60/100
Number of ratings4
Active installs500
Developer Profile

PDF Forms Filler for WPForms Developer Profile

maximum.software

5 plugins · 4K total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PDF Forms Filler for WPForms

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pdf-forms-for-wpforms/assets/css/pdf-forms-for-wpforms.css/wp-content/plugins/pdf-forms-for-wpforms/assets/js/pdf-forms-for-wpforms.js
Script Paths
/wp-content/plugins/pdf-forms-for-wpforms/assets/js/pdf-forms-for-wpforms.js
Version Parameters
/wp-content/plugins/pdf-forms-for-wpforms/assets/css/pdf-forms-for-wpforms.css?ver=/wp-content/plugins/pdf-forms-for-wpforms/assets/js/pdf-forms-for-wpforms.js?ver=

HTML / DOM Fingerprints

CSS Classes
pdf-forms-for-wpforms-noticepdf-forms-for-wpforms-error-noticepdf-forms-for-wpforms-warning-notice
JS Globals
pdf_forms_for_wpforms_ajax_object
REST Endpoints
/wp-json/pdf-forms-for-wpforms/v1/options
FAQ

Frequently Asked Questions about PDF Forms Filler for WPForms