Free tools Windows power users keep installed
One-click scans. No signup required.
If you still generate PDFs with wkhtmltopdf, plan a move rather than treating it as a maintained renderer. The project lists 0.12.6, released June 11, 2020, as its current stable series; its GitHub repository has been read-only since its owner archived it on January 2, 2023. The project also warns that untrusted HTML or JavaScript can expose the server to complete takeover. The right replacement depends chiefly on whether your documents need dynamic JavaScript or are controlled report HTML.
What wkhtmltopdf’s maintenance and security status means
The official downloads page identifies version 0.12.6 as the current stable series and gives its release date as June 11, 2020. The project’s GitHub repository says it was archived on January 2, 2023, and is now read-only. The downloads page also says bug reports will not be accepted for versions it lists as obsolete. Taken together, these are reasons to avoid assuming ongoing upstream fixes or support.
As an Amazon Associate I earn from qualifying purchases.
The project’s own security warning is direct: “Do not use wkhtmltopdf with any untrusted HTML – be sure to sanitize any user-supplied HTML/JS, otherwise there can be complete takeover of the server it is running on!” This warning appears on the project downloads page. If user-controlled HTML, JavaScript, CSS, URLs, or assets can reach the renderer, treat that as a security boundary to address now, not just a migration detail. The project’s status page also suggests considering AppArmor or SELinux as additional controls.
A GitHub issue reports CVE-2022-35583 as an SSRF vulnerability affecting 0.12.6. That is an issue report, not enough here to establish a verified severity score, exploit details, or patch status. Do not rely on an unverified score quoted in the issue title as an independently confirmed rating.
#1 Best Overall
- Convert your PDF files into Word, Excel & Co. the easy way
- Convert scanned documents thanks to our new 2022 OCR technology
- Adjustable conversion settings
- No subscription! Lifetime license!
- Compatible with Windows 11, 10, 8.1, 7 - Internet connection required
Which wkhtmltopdf alternatives fit your documents?
The project’s status page distinguishes between dynamic websites and controlled report-generation HTML. Use that distinction to shortlist candidates; neither route is established as universally superior.
| Document workload | Starting point named by the project | What to verify |
|---|---|---|
| Pages that depend on dynamic JavaScript | Puppeteer | Whether your scripts, timing, assets, and print layout produce the required output in your environment. |
| Reports generated from HTML your application controls | WeasyPrint or commercial Prince | Whether your report CSS, fonts, page breaks, headers and footers, links, and images match the required output. |
These are starting suggestions from the project, not a current comparison of versions, benchmarks, support terms, costs, or migration effort. Confirm those details in each candidate’s current primary documentation before making an operational or commercial decision.
Rank #2
- Convert over 50 document file formats.
- Preview your files from Doxillion before converting them.
- Use batch conversion to convert thousands of files at once.
- Enjoy an easy-to-use, intuitive interface with a Drag and Drop file option.
- Burn your converted or original files directly to disc.
What to check before replacing the renderer
Do not choose based on a successful one-page sample alone. The official downloads page notes that some wkhtmltopdf features depend on its patched Qt build and that behavior can vary across Linux distribution builds. That variation makes an inventory and representative output corpus important before selecting a replacement.
Recommended Free Tools
- Call sites and configuration: record each use, package or binary version, command-line flags, and any dependency on patched-Qt features.
- Document behavior: note CSS, JavaScript execution and timing, fonts, page breaks, headers and footers, hyperlinks, and images that affect output.
- Input trust: identify whether user-controlled HTML, CSS, URLs, or assets can reach the renderer.
- Deployment ownership: compare runtime and dependency needs, operational responsibility, and any commercial terms against current primary documentation; the available project guidance does not rank candidates on these factors.
How to migrate from wkhtmltopdf
- Inventory the existing implementation. Find every renderer call, record the deployed version and flags, and identify patched-Qt dependencies and input sources.
- Build a representative PDF corpus. Include the document types you actually produce: long reports, non-Latin fonts, images, links, page-break edge cases, and JavaScript-dependent pages where applicable.
- Shortlist by document behavior. Start with Puppeteer for dynamic JavaScript pages; consider WeasyPrint or Prince for controlled report HTML, following the project’s guidance.
- Compare old and new output against the same corpus. Review visual layout and structural details such as links and pagination. This is a validation step for your system, not evidence of a published comparative benchmark.
- Reduce exposure during the transition. Sanitize untrusted input and restrict the renderer’s execution environment, including network and filesystem access where appropriate. The project specifically names AppArmor and SELinux as possible controls on its status page.
- Roll out reversibly. Use a feature flag or controlled cohort, monitor rendering failures and output regressions, and retain a rollback path until the new renderer is validated.
How to decide when the migration is ready
Set acceptance criteria from your corpus rather than assuming that a replacement will reproduce every wkhtmltopdf behavior automatically. A practical release gate is that the chosen renderer handles the document types your application requires, the security boundary is understood and constrained, and the rollout can be reversed if failures or regressions appear. Keep exceptions visible: a document that depends on a particular flag or patched-Qt behavior may need a deliberate redesign rather than a direct engine swap.
Quick Recap
Best Value
- Convert over 50 document file formats.
- Preview your files from Doxillion before converting them.
- Use batch conversion to convert thousands of files at once.
- Enjoy an easy-to-use, intuitive interface with a Drag and Drop file option.
- Burn your converted or original files directly to disc.
Rank #4
- Perfect Adobe Acrobat Pro alternative – lifetime license for Windows 10 and 11.
- EDIT text, images, pages, hyperlinks, designs in PDF documents. ORGANIZE PDFs.
- READ and Comment on PDFs – Intuitive reading modes & document commenting and mark up tools!
- CREATE, COMBINE, SCAN and COMPRESS PDFs.
- FILL forms & Digitally Sign PDFs. Work with Digital certificates
Rank #3
- EDIT text, images & designs in PDF documents. ORGANIZE PDFs. Convert PDFs to Word, Excel & ePub.
- READ and Comment PDFs – Intuitive reading modes & document commenting and mark up.
- CREATE, COMBINE, SCAN and COMPRESS PDFs
- FILL forms & Digitally Sign PDFs. PROTECT and Encrypt PDFs
- 1 Year License for 1 Windows & 2 Mobile (Android and/or iOS) devices.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.




