{
 "id": "WPSEC-2026-2883",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2883/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2883/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2883/index.md",
 "title": "E2Pdf – Export Pdf Tool for WordPress <= 2.00.00 - Unauthenticated Shortcode Injection via Form Entry Data",
 "description": "The E2Pdf plugin for WordPress is vulnerable to shortcode injection via submitted form entry data in all versions up to, and including, 2.00.00, due to entry values (for example Formidable Forms [default-message] output) and [e2pdf-foreach]/[e2pdf-for] loop data being inserted into the PDF template value without neutralizing shortcode syntax before the value is passed to do_shortcode(). This makes it possible for unauthenticated attackers to place E2Pdf data shortcodes such as [e2pdf-user] or [e2pdf-wp] in a form field. These run when the PDF is generated and can expose other users' profile data or user meta, or other posts' data, in a PDF the attacker can download.",
 "plugin": {
  "slug": "e2pdf",
  "name": "E2Pdf – Export Pdf Tool for WordPress",
  "full_name": "E2Pdf – Export Pdf Tool for WordPress",
  "wordpress_org": "https://wordpress.org/plugins/e2pdf/",
  "advisories_url": "https://wpsec.com/vuln/plugin/e2pdf/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/e2pdf"
 },
 "type": "CONTENT INJECTION",
 "cwe": [
  "CWE-94"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.7,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.00.01",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.00.01"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.00.01",
 "remediation": "Update to 2.00.01 or later.",
 "fix_released": "2026-11-11T13:13:33+00:00",
 "published": "2026-11-12T17:52:14+00:00",
 "updated": "2026-11-12T17:08:15.284660+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2883/",
  "https://plugins.svn.wordpress.org/e2pdf/tags/2.00.01/",
  "https://wordpress.org/plugins/e2pdf/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/e2pdf",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-12"
 }
}