CVE-2026-32473

HighCVSS 7.2

Published: 18/08/2026(UTC)Updated: 22/10/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

PDF Smart Viewer for Elementor versions up to 1.0.4 contain an unauthenticated Server Side Request Forgery (SSRF) vulnerability. An attacker can send requests from the server to internal resources.

Risk Assessment

An attacker can access internal services or data, potentially leading to confidentiality breaches.

Recommendation

Upgrade PDF Smart Viewer for Elementor to the latest version that fixes this vulnerability.

Other vulnerabilities in PDF Smart Viewer for Elementor

CVE-2026-39719High
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor versions up to 1.0.4.

Original NVD description (English source)

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS