Vulnerabilities / Document Engine
Document Engine vulnerabilities
Advisories WPSec published for Document Engine – Document Library, PDF Viewer & Post to PDF. Other sources may list more. Its attack surface: Document Engine on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0594 | Document Engine <= 2.1.0 - Authenticated (Author+) Server-Side Request Forgery via Post to PDF | Medium 6.4 | 2.2.0 |
| 2026-10-01 | WPSEC-2026-0149 | Document Engine <= 1.3 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure via PDF Viewer Block | Medium 4.3 | 2.0.0 |
| 2026-10-01 | WPSEC-2026-0148 | Document Engine <= 1.3 - Authenticated (Author+) Server-Side Request Forgery via Post to PDF Images | Medium 5.0 | 2.0.0 |
| 2026-10-01 | WPSEC-2026-0147 | Document Engine <= 1.3 - Unauthenticated Sensitive Information Exposure via Post to PDF Export | Medium 5.3 | 2.0.0 |
License: CC BY 4.0