Medium · 6.6 CVE-2023-46154 EUVD-2023-50397GHSA-9f9x-vfjh-3j83

WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection

Published Dec 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: E2Pdf.com Product: E2Pdf – Export To Pdf Tool for WordPress Category: Web / CMS

Description

Deserialization of Untrusted Data vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This issue affects E2Pdf – Export To Pdf Tool for WordPress: from n/a through 1.20.18.

Affected products

Vendor	Product	Affected	Fixed
E2Pdf.com	E2Pdf – Export To Pdf Tool for WordPress	≤ 1.20.18	—

References

https://patchstack.com/database/vulnerability/e2pdf/wordpress-e2pdf-plugin-1-20-18-php-object-injection-vulnerability?_s_id=cve vdb-entry