CVE-2026-32473 WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in PDF Smart Viewer for Elementor = 1.0.4 versions...

CVE-2026-32473

The "pdf-smart-viewer-for-elementor" WordPress plugin (versions ≤ 1.0.4) allows unauthenticated attackers to force server-side HTTP requests, enabling internal network access or metadata probing. CVSS 7.2 (HIGH) reflects network access with low impact. No exploitation observed; update to a patche...