Plugin icon

E2Pdf – Export Pdf Tool for WordPress

e2pdf

Vulnerabilities:

12

Last Updated:

June 3, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-18
Title
E2Pdf – Export Pdf Tool for WordPress < 1.32.15 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.32.15
CVSS
6.1 (medium)
Published
2026-05-07
Title
E2Pdf – Export Pdf Tool for WordPress < 1.32.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Fixed in
Fixed in 1.32.18
CVSS
5.5 (medium)
Published
2026-03-04
Title
e2pdf < 1.32.00 - Missing Authorization
Fixed in
Fixed in 1.32.00
CVSS
4.3 (medium)
Published
2025-10-16
Title
e2pdf < 1.28.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.28.10
CVSS
6.4 (medium)
Published
2024-08-16
Title
e2pdf < 1.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.25.11
CVSS
6.4 (medium)
Published
2024-06-28
Title
E2Pdf – Export To Pdf Tool for WordPress < 1.23.00 - Missing Authorization
Fixed in
Fixed in 1.23.00
CVSS
4.3 (medium)
Published
2024-04-10
Title
e2pdf < 1.23.00 - Cross-Site Request Forgery
Fixed in
Fixed in 1.23.00
CVSS
4.3 (medium)
Published
2023-12-21
Title
E2Pdf < 1.20.24 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 1.20.24
CVSS
6.6 (medium)
Published
2023-12-13
Title
E2Pdf < 1.20.26 - Admin+ Arbitrary File Upload
Fixed in
Fixed in 1.20.26
CVSS
7.2 (high)
Published
2023-10-17
Title
E2Pdf < 1.20.19 - Authenticated (Administrator+) PHP Object Injection
Fixed in
Fixed in 1.20.19
CVSS
7.2 (high)
Published
2023-10-09
Title
E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping
Fixed in
Fixed in 1.20.20
CVSS
3.5 (low)
Published
2022-02-09
Title
E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.16.45
CVSS
4.8 (medium)