CVE-2026-39719

DeKnows PDF Smart Viewer for Elementor

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

7.2 High · CVSS 3.1, patchstack.com

Description

Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.

References

patchstack.com/database/wordpress/plugin/pdf-smart-viewer-for-elementor/vulnerability/wordpress-pdf-smart-viewer-for-elementor-plugin-1-0-4-server-side-request-forgery-ssrf-vulnerability-2?_s_id=cve