E2pdf
7 CVEs across 1 E2pdf products. Browse E2pdf vulnerabilities, severities, and proof-of-concept exploits.
E2pdf products with known CVEs
E2pdf CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-66710 | High | 8.1 | 2026-08-06 | Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions. |
CVE-2026-32442 | Medium | 5.0 | 2026-03-13 | Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from… |
CVE-2025-62068 | Medium | 6.5 | 2025-10-22 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a thro… |
CVE-2024-37415 | Medium | 5.4 | 2024-11-01 | Missing Authorization vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27. |
CVE-2024-43318 | Medium | 6.5 | 2024-08-18 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a thro… |
CVE-2024-31373 | Medium | 5.4 | 2024-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27. |
CVE-2023-50849 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This i… |
CVE-2023-46154 | Medium | 6.6 | 2023-12-19 | Deserialization of Untrusted Data vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPre… |
CVE-2023-6826 | High | 7.2 | 2023-12-15 | The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'import_action' function in versions up… |
CVE-2023-5229 | Medium | 4.8 | 2023-10-31 | The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scrip… |
CVE-2022-0535 | Medium | 4.8 | 2022-03-07 | The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scrip… |