CVE-2026-122671: WordPress e2pdf plugin <= 1.32.65 - Broken Access Control vulnerability

Q: Which installations are affected?

The issue affects the E2Pdf.com e2pdf WordPress plugin through version 1.32.65. The available data does not identify a safe fixed version.

Q: What level of access does an attacker need?

The CVSS vector indicates that an attacker needs low-level privileges and can exploit the issue remotely without user interaction. The vulnerability may expose confidential information, while no integrity or availability impact is listed.

Published Nov 11, 2026

Updated

Missing Authorization vulnerability in E2Pdf.com e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through 1.32.65.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress e2pdf plugin to a version that resolves this vulnerability.
Fixed in 2.00.00

Event History

Nov 11, 2026

CVE Published

via MITRE·11:36 AM

Data Sourced

via MITRE·11:36 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·12:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

The issue affects the E2Pdf.com e2pdf WordPress plugin through version 1.32.65. The available data does not identify a safe fixed version.

What level of access does an attacker need?

The CVSS vector indicates that an attacker needs low-level privileges and can exploit the issue remotely without user interaction. The vulnerability may expose confidential information, while no integrity or availability impact is listed.

CVE-2026-122671: WordPress e2pdf plugin <= 1.32.65 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which installations are affected?

What level of access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What level of access does an attacker need?