High · 7.1 CVE-2026-42681 EUVD-2026-33656GHSA-3v6w-rf9f-2qhg

WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jun 1, 2026 · Updated Jun 1, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.Com e2pdf allows Reflected XSS.

This issue affects e2pdf: from n/a through 1.32.14.

Vendor	Product	Affected	Fixed
E2Pdf.com	e2pdf	≤ 1.32.14	—