CVE-2026-111410: WordPress e2pdf plugin <= 1.32.57 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This issue affects e2pdf: from n/a through 1.32.57.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress e2pdf pluginto a version that resolves this vulnerability.Fixed in 1.32.58
Event History
Frequently Asked Questions
Which deployments are affected?
E2Pdf.com e2pdf versions through 1.32.57 are affected. The available data does not identify a fixed version.
What access and interaction are required for exploitation?
The CVSS vector indicates that an attacker needs low-level privileges and that user interaction is required. The attack can be performed over the network with low attack complexity.
What is the potential impact of a successful exploit?
This is a stored XSS issue. The CVSS vector indicates low confidentiality, integrity, and availability impact, with impacts extending beyond the vulnerable security authority.