{"id":"CVE-2026-111410","kind":"vulnerability","aliases":["CVE-2026-111410"],"related":[],"title":"E2Pdf WordPress plugin: stored XSS through versions up to 1.32.57","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This issue affects e2pdf: from n/a through 1.32.57.","summary":"The e2pdf plugin by E2Pdf.com does not neutralize input when generating web pages, which allows stored cross-site scripting. An attacker who can store content in the plugin can run script in the browser of anyone who views that content.","severity":"medium","cvss":6.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["e2pdf","package","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed e2pdf version in the plugin settings or the plugin header, and see whether it is `1.32.57` or older\n- unknown","fix":"- Update e2pdf to a version newer than `1.32.57` once a fixed release is published; the sources do not name it\n- unknown","status":"open","published_at":"2026-10-19T13:16:55+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","triaged_at":"2026-10-25T03:57:07+00:00","updated_at":"2026-10-25T03:57:07+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T03:57:07Z","model":"claude-haiku-5-5","output":{"fix":"- Update e2pdf to a version newer than `1.32.57` once a fixed release is published; the sources do not name it\n- unknown","reach":"unknown","title":"E2Pdf WordPress plugin: stored XSS through versions up to 1.32.57","impact":"medium","summary":"The e2pdf plugin by E2Pdf.com does not neutralize input when generating web pages, which allows stored cross-site scripting. An attacker who can store content in the plugin can run script in the browser of anyone who views that content.","category":"package","nicknames":[],"who_cares":["e2pdf","wordpress"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker script runs in visitors' browsers, stealing sessions or actions","analyst_note":"Check the NVD entry and the vendor's plugin changelog for the fixed version and the required privilege level to store the payload.","how_to_check":"- Check the installed e2pdf version in the plugin settings or the plugin header, and see whether it is `1.32.57` or older\n- unknown","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites that run the e2pdf plugin at version `1.32.57` or older are affected, as the description states the issue affects all versions through that release. Sites without the plugin installed can skip it. The sources do not say which roles can store content or whether default settings expose it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000593,"input_tokens":3313,"output_tokens":524,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111410':13A,16A '-2026':12A,15A '1.32.57':10A,87C 'affect':82C 'allow':34B,78C 'anyon':56B 'attack':41B 'browser':54B 'content':45B,60B 'cross':37B,70C 'cross-sit':36B,69C 'cve':11A,14A 'e2pdf':1A,17B,21B,76C,77C,83C 'e2pdf.com':24B,75C 'generat':30B,68C 'improp':61C 'input':28B,64C 'issu':81C 'n/a':85C 'neutral':27B,62C 'packag':18B 'page':32B,67C 'plugin':3A,22B,48B 'run':50B 'script':39B,51B,72C 'site':38B,71C 'store':4A,35B,44B,79C 'version':7A 'view':58B 'vulner':73C 'web':31B,66C 'wordpress':2A,19B 'xss':5A 'xss.this':80C","nicknames":[],"mitigations":[],"who_affected":"Sites that run the e2pdf plugin at version `1.32.57` or older are affected, as the description states the issue affects all versions through that release. Sites without the plugin installed can skip it. The sources do not say which roles can store content or whether default settings expose it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-19T13:16:55+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111410","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111410","severity":null,"published_at":"2026-10-19T13:16:55+00:00","modified_at":"2026-10-19T15:16:54+00:00","first_seen_at":"2026-10-23T21:57:18+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}