Skip to content
Noroxi

e2pdf

e2pdf · plugin

Known security vulnerabilities for e2pdf. Find out in seconds which version runs on your site with WP Lens.

13 known vulnerabilities

1 with public exploit code · latest Aug 6, 2026

Vulnerabilities

  • CVE-2026-12407

    E2Pdf <= 1.32.26 - Missing Authorization to Authenticated (Custom+) Arbitrary Option Update / Privilege Escalation via 'screen_action' Parameter

    High 8.8

  • CVE-2026-66710

    WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability

    High 8.1

  • CVE-2023-50849

    WordPress e2pdf Plugin <= 1.20.23 is vulnerable to SQL Injection

    High 7.2

  • CVE-2023-46154

    WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection

    High 7.2

  • CVE-2023-6826

    E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

    High 7.2

  • CVE-2026-42681

    WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-62068

    WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-7650

    E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

    Medium 6.4

  • CVE-2024-37415

    WordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerability

    Medium 5.4

  • CVE-2024-43318

    WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-31373

    WordPress E2Pdf plugin <= 1.20.27 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 5.4

  • CVE-2026-32442

    WordPress e2pdf plugin <= 1.28.15 - Broken Access Control vulnerability

    Medium 5.0

  • CVE-2022-0535→ 1.16.45

    E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)

    Medium 4.8

← Back to directory