CVE-2026-32473

HighCVSS 7.2

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

17th percentile - higher than 17% of all known CVEs

Summary

PDF Smart Viewer for Elementor versions up to 1.0.4 contain an unauthenticated Server Side Request Forgery (SSRF) vulnerability. An attacker can send requests from the server to internal resources.

Risk Assessment

An attacker can access internal services or data, potentially leading to confidentiality breaches.

Recommendation

Upgrade PDF Smart Viewer for Elementor to the latest version that fixes this vulnerability.

Original NVD description (English source)

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.