Lucene search
+L

141 matches found

Cvelist
Cvelist
added 2026/06/01 2:52 p.m.56 views

CVE-2026-42681 WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E2Pdf.Com e2pdf allows Reflected XSS. This issue affects e2pdf: from n/a through 1.32.14...

7.1CVSS0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/01 2:52 p.m.14 views

CVE-2026-42681 WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E2Pdf.Com e2pdf allows Reflected XSS. This issue affects e2pdf: from n/a through 1.32.14...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/01 2:52 p.m.44 views

CVE-2026-42681

CVE-2026-42681 affects the WordPress plugin e2pdf (versions up to 1.32.14). The issue is a Reflected XSS due to improper neutralization during web page generation, enabling cross-site scripting. CVSSv3.1 base score 7.1 (HIGH) with Network attack vector, Low confidentiality/integrity/availability ...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.18 views

WordPress plugin e2pdf 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

7.1CVSS5.1AI score0.00142EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.28 views

PT-2026-45434

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in E2Pdf.Com e2pdf allows Reflected XSS. This issue affects e2pdf: from n/a through 1.32.14...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/05/18 6:22 a.m.16 views

WordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin e2pdf versions = 1.32.14...

7.1CVSS5.8AI score0.00142EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/05/08 12:31 p.m.40 views

EUVD-2026-28544

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the e2pdf-download shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode...

6.4CVSS6AI score0.00244EPSS
SaveExploits0References7
NVD
NVD
added 2026/05/08 10:16 a.m.53 views

CVE-2026-7650

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the e2pdf-download shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode...

6.4CVSS0.00244EPSS
SaveExploits0References6
CVE
CVE
added 2026/05/08 9:26 a.m.34 views

CVE-2026-7650

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is affected by a Stored Cross-Site Scripting (XSS) flaw in the e2pdf-download shortcode’s id attribute. Versions up to and including 1.32.17 are vulnerable due to insufficient input sanitization and output escaping of the shortcode at...

6.4CVSS6AI score0.00244EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/05/08 9:26 a.m.18 views

CVE-2026-7650 E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the e2pdf-download shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode...

6.4CVSS6AI score0.00244EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/05/08 9:26 a.m.74 views

CVE-2026-7650 E2Pdf – Export Pdf Tool for WordPress <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the e2pdf-download shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode...

6.4CVSS0.00244EPSS
SaveExploits0References6
attackerkb
attackerkb
added 2026/05/08 9:26 a.m.8 views

CVE-2026-7650

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the e2pdf-download shortcode in all versions up to, and including, 1.32.17. This is due to insufficient input sanitization and output escaping on the shortcode...

6.4CVSS6AI score0.00244EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/05/08 12:00 a.m.35 views

PT-2026-38905

Name of the Vulnerable Software and Affected Versions E2Pdf – Export Pdf Tool for WordPress versions prior to 1.32.18 Description The E2Pdf – Export Pdf Tool for WordPress plugin allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts. This occurs du...

6.4CVSS6AI score0.00244EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/05/08 12:00 a.m.16 views

WordPress plugin E2Pdf – Export Pdf Tool for WordPress 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

6.4CVSS5.8AI score0.00244EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/07 8:45 p.m.16 views

WordPress E2Pdf – Export Pdf Tool for WordPress plugin <= 1.32.17 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin e2pdf versions = 1.32.17...

6.4CVSS5.8AI score0.00244EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.14 views

CVE-2026-32442

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through = 1.28.15...

4.3CVSS5.8AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/13 7:55 p.m.13 views

CVE-2026-32442

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through = 1.28.15...

5CVSS0.00135EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.6 views

CVE-2026-32442 WordPress e2pdf plugin <= 1.28.15 - Broken Access Control vulnerability

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through = 1.28.15...

5.8AI score0.00135EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/13 11:42 a.m.71 views

CVE-2026-32442

The CVE-2026-32442 entry concerns the WordPress e2pdf plugin with versions up to 1.28.15. It is a Missing Authorization/Broken Access Control vulnerability arising from incorrectly configured access control security levels in e2pdf, allowing inappropriate access due to insufficient authorization ...

5CVSS5.8AI score0.00135EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/03/13 11:42 a.m.5 views

CVE-2026-32442

Missing Authorization vulnerability in E2Pdf e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through = 1.28.15...

5.8AI score0.00135EPSS
SaveExploits0References2
Rows per page
Query Builder