Known vulnerabilities in BSK PDF Manager

Manage your PDFs / documents by category, can be display in list, columns and dropdown. Easy to embed a PDF contnet into post / page.

9Reported vulnerabilities

7.2Highest CVSS score

3.8.1Latest version

7,000+Active installs

What to do now

Update BSK PDF Manager to 3.8.1 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 10, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-4367	Medium 6.4	70.7%	3.6 and earlier	`3.6.1`	May 20, 2024
CVE-2014-4944	Medium 6.5	3.6%	1.3.2 to 1.3.2 (inclusive)	`1.5`	July 14, 2014
CVE-2021-24860	High 7.2	1.3%	Before 3.1.2	`3.1.2`	November 29, 2021
CVE-2024-38767	Medium 6.4	0.3%	3.6 and earlier	`3.6.1`	July 15, 2024
CVE-2026-65528	Medium 6.4	0.2%	3.8 and earlier	`3.8.1`	July 23, 2026
WF-667d964a-dba6-424a-b3f5-af433616c132	Medium 6.4	—	1.3 to 2.9 (inclusive)	`2.9.1`	August 1, 2014
CVE-2025-4970	Medium 5.5	0.3%	0 to 3.7.1 (inclusive)	`3.7.2`	December 12, 2025
CVE-2023-5110	Medium 5.4	0.4%	3.4.1 and earlier	`3.4.2`	October 25, 2023
CVE-2026-39686	Medium 5.3	0.2%	3.7.2 and earlier	`3.8`	February 22, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.