CVE-2024-31373 MEDIUM

CVE-2024-31373: WordPress E2Pdf plugin <= 1.20.27 - Cross Site Request Forgery (CSRF) vulnerability

Vendor E2Pdf
Product e2pdf
Weakness CWE-352 · CSRF
Published April 15, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.20.27.

Key dates

02Disclosure timeline

April 15, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-62133 WordPress FormFacade plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-4090 Inquiry cart <= 3.4.2 - Cross-Site Request Forgery via Settings Form CVE-2022-29431 Remove CPT base <= 5.8 - CSRF leads to CPT base deletion CVE-2025-25166 WordPress InLocation plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability CVE-2022-45072 WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability