CVE-2026-39719: WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

Q: Who can attempt to exploit this issue?

The vulnerability is unauthenticated and remotely reachable, so an attacker does not need a WordPress account or prior privileges to attempt exploitation against an exposed site running an affected plugin version.

Q: Which installations should be treated as affected?

WordPress sites using PDF Smart Viewer for Elementor version 1.0.4 or earlier should be treated as affected. Check whether the plugin is installed and verify its installed version.

Q: What impact is indicated by the available severity data?

The CVSS vector indicates low-complexity network exploitation with no required privileges or user interaction. It indicates potential low-impact confidentiality and integrity effects, with no availability impact listed.

Published Oct 6, 2026

Updated

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

Affected Software

1 affected component

WordPress PDF Smart Viewer for Elementor<=1.0.4

Event History

Oct 6, 2026

CVE Published

via MITRE·08:34 AM

Data Sourced

via MITRE·08:34 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can attempt to exploit this issue?

The vulnerability is unauthenticated and remotely reachable, so an attacker does not need a WordPress account or prior privileges to attempt exploitation against an exposed site running an affected plugin version.

Which installations should be treated as affected?

WordPress sites using PDF Smart Viewer for Elementor version 1.0.4 or earlier should be treated as affected. Check whether the plugin is installed and verify its installed version.

What impact is indicated by the available severity data?

The CVSS vector indicates low-complexity network exploitation with no required privileges or user interaction. It indicates potential low-impact confidentiality and integrity effects, with no availability impact listed.

CVE-2026-39719: WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can attempt to exploit this issue?

Which installations should be treated as affected?

What impact is indicated by the available severity data?

Company

Resources

Contact

Frequently Asked Questions

Who can attempt to exploit this issue?

Which installations should be treated as affected?

What impact is indicated by the available severity data?