WP-Safety

PDF Forms Filler for WPForms Security & Risk Analysis

wordpress.org/plugins/pdf-forms-for-wpforms

Build WPForms from PDF forms. Get PDFs filled automatically and attached to email messages and/or website responses on form submissions.

600 active installs v1.3.3 PHP 5.5+ WP 5.4+ Updated Apr 10, 2026
downloademailformpdfwpforms
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is PDF Forms Filler for WPForms Safe to Use in 2026?

Generally Safe

Score 100/100

PDF Forms Filler for WPForms has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "pdf-forms-for-wpforms" plugin v1.3.2 demonstrates a generally strong security posture based on the provided static analysis. All identified entry points (AJAX handlers and cron events) appear to have proper authentication and authorization checks, which is a significant strength. The plugin also exhibits good practices with 100% of its SQL queries using prepared statements and a high percentage of output being properly escaped. The absence of critical or high-severity taint flows and a clean vulnerability history with zero recorded CVEs further contribute to this positive assessment.

Key Concerns

  • 10% of outputs unescaped
  • Bundled library: Select2
Vulnerabilities
None known

PDF Forms Filler for WPForms Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

PDF Forms Filler for WPForms Release Timeline

v1.3.3Current
v1.3.2
v1.3.1
v1.3.0
v1.2.0
v1.1.11
v1.1.10
v1.1.9
v1.1.8
v1.1.7
v1.1.6
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.1
v1.1.0
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

PDF Forms Filler for WPForms Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
12
109 escaped
Nonce Checks
8
Capability Checks
17
File Operations
19
External Requests
4
Bundled Libraries
1

Bundled Libraries

Select2

Output Escaping

90% escaped121 total outputs
Attack Surface

PDF Forms Filler for WPForms Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 3

authwp_ajax_pdf_forms_for_wpforms_get_attachment_datapdf-forms-for-wpforms.php:75
authwp_ajax_pdf_forms_for_wpforms_query_page_imagepdf-forms-for-wpforms.php:76
authwp_ajax_pdf_forms_for_wpforms_generate_pdf_ninja_keypdf-forms-for-wpforms.php:77
WordPress Hooks 42
actioninitinc\class-tgm-plugin-activation.php:268
filterload_textdomain_mofileinc\class-tgm-plugin-activation.php:269
actioninitinc\class-tgm-plugin-activation.php:272
actionadmin_menuinc\class-tgm-plugin-activation.php:421
actionadmin_headinc\class-tgm-plugin-activation.php:422
filterinstall_plugin_complete_actionsinc\class-tgm-plugin-activation.php:425
filterupdate_plugin_complete_actionsinc\class-tgm-plugin-activation.php:426
actionadmin_noticesinc\class-tgm-plugin-activation.php:429
actionadmin_initinc\class-tgm-plugin-activation.php:430
actionadmin_enqueue_scriptsinc\class-tgm-plugin-activation.php:431
actionload-plugins.phpinc\class-tgm-plugin-activation.php:436
actionswitch_themeinc\class-tgm-plugin-activation.php:439
actionswitch_themeinc\class-tgm-plugin-activation.php:442
actionadmin_initinc\class-tgm-plugin-activation.php:447
actionswitch_themeinc\class-tgm-plugin-activation.php:452
actionload_textdomain_mofileinc\class-tgm-plugin-activation.php:475
filterupgrader_source_selectioninc\class-tgm-plugin-activation.php:889
actionplugins_loadedinc\class-tgm-plugin-activation.php:2112
filtertgmpa_table_data_itemsinc\class-tgm-plugin-activation.php:2236
filterupgrader_source_selectioninc\class-tgm-plugin-activation.php:2977
actionadmin_initinc\class-tgm-plugin-activation.php:3147
actionupgrader_process_completeinc\class-tgm-plugin-activation.php:3242
filterupgrader_post_installinc\class-tgm-plugin-activation.php:3301
filterupgrader_post_installinc\class-tgm-plugin-activation.php:3446
actiontgmpa_registerinc\tgm-config.php:8
filterwpforms_settings_defaultsmodules\pdf-ninja.php:24
filterwpforms_settings_tabsmodules\pdf-ninja.php:25
actionadmin_noticespdf-forms-for-wpforms.php:44
actionplugins_loadedpdf-forms-for-wpforms.php:45
actionpdf_forms_for_wpforms_cronpdf-forms-for-wpforms.php:49
actioninitpdf-forms-for-wpforms.php:68
actionadmin_enqueue_scriptspdf-forms-for-wpforms.php:70
actionadmin_menupdf-forms-for-wpforms.php:79
filterwpforms_save_form_argspdf-forms-for-wpforms.php:81
filterwpforms_smarttags_process_valuepdf-forms-for-wpforms.php:83
actionwpforms_process_entry_savedpdf-forms-for-wpforms.php:87
actionwpforms_process_completepdf-forms-for-wpforms.php:88
filterwpforms_emails_send_email_datapdf-forms-for-wpforms.php:89
actionwpforms_frontend_confirmation_messagepdf-forms-for-wpforms.php:90
filterwpforms_builder_settings_sectionspdf-forms-for-wpforms.php:92
actionwpforms_form_settings_panel_contentpdf-forms-for-wpforms.php:93
filtercron_schedulespdf-forms-for-wpforms.php:95

Scheduled Events 1

pdf_forms_for_wpforms_cron
Maintenance & Trust

PDF Forms Filler for WPForms Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedApr 10, 2026
PHP min version5.5
Downloads12K

Community Trust

Rating60/100
Number of ratings4
Active installs600
Alternatives

PDF Forms Filler for WPForms Alternatives

PDF Forms Filler for CF7

PDF Forms Filler for CF7

pdf-forms-for-contact-form-7

A
100

Build Contact Form 7 forms from PDF forms. Get PDFs auto-filled and attached to email messages and/or website responses on form submission.

3K No CVEs
PDF Forms Filler for WooCommerce

PDF Forms Filler for WooCommerce

pdf-forms-for-woocommerce

A
100

Automatically fill PDF forms with WooCommerce orders and attach generated PDFs to email notifications and order downloads.

20 No CVEs
Gravity PDF

Gravity PDF

gravity-forms-pdf-extended

A
100

Automatically generate, email and download PDF documents from Gravity Forms entries

20K 1 CVE
E2Pdf – Export Pdf Tool for WordPress

E2Pdf – Export Pdf Tool for WordPress

e2pdf

A
89

PDF Builder for CF7, Divi, Elementor Forms, Everest, Fluent, Formidable, Forminator, Gravity, JFB, Ninja, WPForms, WooCommerce, Post Meta, ACF, etc.

10K 11 CVEs
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

tablesome

A
86

Powerful Table, Form & Mail Automations. Form Entry Management (+ frontend table ), integrate with MailChimp, G Sheets, CF7, WPForms, Elementor, etc.

8K 11 CVEs
Developer Profile

PDF Forms Filler for WPForms Developer Profile

maximum.software

5 plugins · 4K total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PDF Forms Filler for WPForms

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pdf-forms-for-wpforms/assets/css/pdf-forms-for-wpforms.css/wp-content/plugins/pdf-forms-for-wpforms/assets/js/pdf-forms-for-wpforms.js
Script Paths
/wp-content/plugins/pdf-forms-for-wpforms/assets/js/pdf-forms-for-wpforms.js
Version Parameters
/wp-content/plugins/pdf-forms-for-wpforms/assets/css/pdf-forms-for-wpforms.css?ver=/wp-content/plugins/pdf-forms-for-wpforms/assets/js/pdf-forms-for-wpforms.js?ver=

HTML / DOM Fingerprints

CSS Classes
pdf-forms-for-wpforms-noticepdf-forms-for-wpforms-error-noticepdf-forms-for-wpforms-warning-notice
JS Globals
pdf_forms_for_wpforms_ajax_object
REST Endpoints
/wp-json/pdf-forms-for-wpforms/v1/options
FAQ

Frequently Asked Questions about PDF Forms Filler for WPForms