CVE-2026-122671 · Package
NO FIX YET · SEE WHAT TO DO
The e2pdf PDF-generation plugin by E2Pdf.com has a missing authorization check, so access control settings are not enforced. An attacker who can reach the affected feature can get access to data or actions they should not have.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Sites running the e2pdf plugin at version 1.32.65 or earlier are in scope according to the NVD description. The sources do not describe the exact configuration or role needed to trigger the flaw, so whether an unauthenticated visitor can reach it is unknown.
Who cares e2pdf, wordpress
1.32.65 or earlier.1.32.65 are affected; the sources do not name a fixed version.Missing Authorization vulnerability in E2Pdf.com e2pdf e2pdf allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects e2pdf: from n/a through 1.32.65.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.