CVE-2026-122671mediumCWE-862

CVE-2026-122671: medium-severity vulnerability in E2Pdf.com e2pdf

WordPress e2pdf plugin <= 1.32.65 - Broken Access Control vulnerability

Published

Follow this CVE+ Monitor e2pdf

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Missing Authorization vulnerability in E2Pdf.com e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through 1.32.65.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
E2Pdf.com · e2pdf
Related CVEs — E2Pdf.com e2pdf

In the same product, most dangerous first.

CVE-2026-42681HIGHWordPress e2pdf plugin <= 1.32.14 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-111410MEDIUMWordPress e2pdf plugin <= 1.32.57 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%