CVE-2026-39719

HighCVSS 7.2

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

16th percentile - higher than 16% of all known CVEs

Summary

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor versions up to 1.0.4.

Risk Assessment

An attacker can use the server to send requests to internal resources, potentially leading to disclosure of sensitive information or attacks on internal services.

Recommendation

Update the PDF Smart Viewer for Elementor plugin to the latest version that includes the security fix.

Other vulnerabilities in PDF Smart Viewer for Elementor

CVE-2026-32473High
PDF Smart Viewer for Elementor versions up to 1.0.4 contain an unauthenticated Server Side Request Forgery (SSRF) vulnerability. An attacker can send requests from the server to internal resources.

Original NVD description (English source)

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS