e2pdf vulnerabilities

4 known CVE vulnerabilities in e2pdf, translated and rated.

CVE-2026-111410Medium
The e2pdf plugin up to version 1.32.57 contains a Stored XSS vulnerability due to improper neutralization of input during web page generation. Malicious JavaScript can be persistently stored and executed in a user's browser.
CVE-2026-66710High
Local File Inclusion (LFI) vulnerability in e2pdf plugin up to version 1.32.40, allowing an unauthenticated attacker to read local files on the server.
CVE-2026-42681High
The e2pdf WordPress plugin (versions up to 1.32.14) has a Reflected Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during page generation.
CVE-2025-62068Medium
The e2pdf WordPress plugin (versions up to and including 1.28.09) contains a cross-site scripting vulnerability due to improper neutralization of input during web page generation. This may allow execution of malicious script in a user's browser.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS