E2Pdf – Export Pdf Tool for WordPress

Güvenlik açıkları

• CVE-2026-12407giriş gerekir≤ 1.32.26

  E2Pdf <= 1.32.26 - Missing Authorization to Authenticated (Custom+) Arbitrary Option Update / Privilege Escalation via 'screen_action' Parameter

  Yüksek 8.8

• CVE-2026-66710kimlik doğrulamasız≤ 1.32.40

  WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability

  Yüksek 8.1

• CVE-2023-50849yüksek yetki≤ 1.20.23

  WordPress e2pdf Plugin <= 1.20.23 is vulnerable to SQL Injection

  Yüksek 7.2

• CVE-2023-46154yüksek yetki≤ 1.20.18

  WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection

  Yüksek 7.2

• CVE-2023-6826yönetici≤ 1.20.25

  E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

  Yüksek 7.2

• CVE-2026-42681kimlik doğrulamasız · tıklama gerekir≤ 1.32.14

  WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-62068giriş gerekir≤ 1.28.09

  WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-7650katılımcı+≤ 1.32.17

  E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

  Orta 6.4

• CVE-2024-37415kimlik doğrulamasız · tıklama gerekir≤ 1.20.27

  WordPress E2Pdf plugin <= 1.20.27 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2024-31373kimlik doğrulamasız · tıklama gerekir≤ 1.20.27

  WordPress E2Pdf plugin <= 1.20.27 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 5.4

• CVE-2024-43318giriş gerekir≤ 1.25.05

  WordPress E2Pdf – Export To Pdf Tool for WordPress plugin <= 1.25.05 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2026-32442giriş gerekir≤ 1.28.15

  WordPress e2pdf plugin <= 1.28.15 - Broken Access Control vulnerability

  Orta 5.0

• CVE-2022-0535yönetici→ 1.16.45

  E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)

  Orta 4.8