E2pdf vulnerabilities
Published CVEs affecting E2pdf products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-66710
High · 8.1
CWE-98 Aug 6, 2026
WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions.
CVE-2026-32442
Medium · 5.0
CWE-862 Mar 13, 2026
WordPress e2pdf plugin <= 1.28.15 - Broken Access Control vulnerability
Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through <= 1.28.15.
CVE-2025-62068
Medium · 6.5
CWE-79 Oct 22, 2025
WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.