Read the docs

E2Pdf

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

E2Pdf records in CISA KEV

No E2Pdf vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E2pdf 9 records MEDIUM

Records

11 records

TI-2023-04807 CVE-2023-5229 · GHSA-m9r2-v6px-98w2

E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping

Priority MEDIUM 55

The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-10-31 Fixed in 1.20.20 CWE-79
TI-2023-06233 CVE-2023-6826 · GHSA-9qxf-hph3-rmgg

E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

Priority LOW 36

The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'import_action' function in versions up to, and including, 1.20.25.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01274 Published 2023-12-15 No fix listed CWE-434
TI-2023-27754 CVE-2023-50849 · GHSA-456m-rhjg-6cq3

WordPress e2pdf Plugin <= 1.20.23 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPress: from n…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0053 Published 2023-12-28 No fix listed CWE-89
TI-2023-24795 CVE-2023-46154 · GHSA-9f9x-vfjh-3j83

WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection

Priority LOW 33

Deserialization of Untrusted Data vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPress: from n/a through 1.20.18.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00917 Published 2023-12-18 No fix listed CWE-502
TI-2025-38391 CVE-2025-62068 · GHSA-6x3r-36pw-49rf

WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00176 Published 2025-10-22 No fix listed CWE-79
TI-2022-00455 CVE-2022-0535 · GHSA-48h4-gmhg-hvjg

E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)

Priority LOW 25

The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01262 Published 2022-03-07 Fixed in 1.16.45 CWE-79
TI-2026-24970 CVE-2026-32442 · GHSA-xjr6-jrh9-wc2p

WordPress e2pdf plugin <= 1.28.15 - Broken Access Control vulnerability

Priority LOW 22

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through <= 1.28.15.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00144 Published 2026-03-13 No fix listed CWE-862
Open these records in search →