Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: E2Pdf Component: E2pdf Clear all filters
TI-2025-38391 CVE-2025-62068 · GHSA-6x3r-36pw-49rf

WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00176 Published 2025-10-22 No fix listed CWE-79
TI-2023-27754 CVE-2023-50849 · GHSA-456m-rhjg-6cq3

WordPress e2pdf Plugin <= 1.20.23 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPress: from n…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0053 Published 2023-12-28 No fix listed CWE-89
TI-2023-24795 CVE-2023-46154 · GHSA-9f9x-vfjh-3j83

WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection

Priority LOW 33

Deserialization of Untrusted Data vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPress: from n/a through 1.20.18.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00917 Published 2023-12-18 No fix listed CWE-502
TI-2023-06233 CVE-2023-6826 · GHSA-9qxf-hph3-rmgg

E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

Priority LOW 36

The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'import_action' function in versions up to, and including, 1.20.25.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01274 Published 2023-12-15 No fix listed CWE-434
TI-2023-04807 CVE-2023-5229 · GHSA-m9r2-v6px-98w2

E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping

Priority MEDIUM 55

The E2Pdf WordPress plugin before 1.20.20 does not sanitize and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-10-31 Fixed in 1.20.20 CWE-79
TI-2022-00455 CVE-2022-0535 · GHSA-48h4-gmhg-hvjg

E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)

Priority LOW 25

The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01262 Published 2022-03-07 Fixed in 1.16.45 CWE-79