Skip to content
OpenAdvisories

Vendor

oleksandrz

3 known vulnerabilities.

Products

E2Pdf – Export Pdf Tool for WordPress 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-12407

    E2Pdf <= 1.32.26 - Missing Authorization to Authenticated (Custom+) Arbitrary Option Update / Privilege Escalation via 'screen_action' Parameter

    The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.32.26. This is due to the screen_action() function lacking a dedicated capability check and nonce verification — when inv…

    oleksandrz E2Pdf – Export Pdf Tool for WordPress Web / CMS
  • High 7.2
    CVE-2023-6826

    E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

    The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'import_action' function in versions up to, and including, 1.20.25. This makes it possible for authenticated attackers with a role that the …

    oleksandrz E2Pdf – Export Pdf Tool for WordPress Web / CMS