oleksandrz E2Pdf Plugin up to 1.32.26 on WordPress screen_action wp_screen_options authorization

Summaryinfo

A vulnerability was found in oleksandrz E2Pdf Plugin up to 1.32.26 on WordPress. It has been classified as critical. The affected element is the function screen_action. The manipulation of the argument wp_screen_options leads to authorization. This vulnerability is referenced as CVE-2026-12407. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as critical, has been found in oleksandrz E2Pdf Plugin up to 1.32.26 on WordPress. This issue affects the function screen_action. The manipulation of the argument wp_screen_options with an unknown input leads to a authorization vulnerability. Using CWE to declare the problem leads to CWE-862. The product does not perform an authorization check when an actor attempts to access a resource or perform an action. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.32.26. This is due to the screen_action() function lacking a dedicated capability check and nonce verification — when invoked via the ?action=screen routing path the controller's index_action() nonce gate is bypassed entirely — while reading an attacker-controlled option name and value from $_POST['wp_screen_options'] and passing them directly to update_option() with no allowlist, relying solely on the page-level e2pdf_templates capability which the plugin's own Permissions UI allows administrators to grant to any role including Subscriber, Contributor, Author, or Editor. This makes it possible for authenticated attackers, with a custom role that has been granted the e2pdf_templates capability, to overwrite arbitrary WordPress options such as default_role and thereby escalate their privileges to administrator.

The weakness was published by Bui Duy. The advisory is shared at wordfence.com. The identification of this vulnerability is CVE-2026-12407 since 06/16/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details are known, but no exploit is available.

Upgrading to version 1.32.11 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• WordPress Plugin

Vendor

• oleksandrz

Name

• E2Pdf Plugin

Version

• 1.32.0
• 1.32.1
• 1.32.2
• 1.32.3
• 1.32.4
• 1.32.5
• 1.32.6
• 1.32.7
• 1.32.8
• 1.32.9
• 1.32.10
• 1.32.11
• 1.32.12
• 1.32.13
• 1.32.14
• 1.32.15
• 1.32.16
• 1.32.17
• 1.32.18
• 1.32.19
• 1.32.20
• 1.32.21
• 1.32.22
• 1.32.23
• 1.32.24
• 1.32.25
• 1.32.26

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion