What is CVE-2026-32473?
CVE-2026-32473 is an unauthenticated Server Side Request Forgery (SSRF) vulnerability found in the PDF Smart Viewer for Elementor plugin in versions up to 1.0.4. This flaw allows a remote attacker to send arbitrary internal network requests through the server. Updating the plugin to the latest version is strongly recommended.
Azərbaycanca: CVE-2026-32473, PDF Smart Viewer for Elementor plagininin 1.0.4 və daha əvvəlki versiyalarında aşkarlanmış autentifikasiyasız Server Side Request Forgery (SSRF) zəifliyidir. Bu boşluq uzaqdan təsdiqlənməmiş hücumçuya server vasitəsilə ixtiyari daxili şəbəkə sorğuları göndərməyə imkan verir. Plaginin ən son versiyaya yenilənməsi tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-918
FAQ2
Which plugin and versions are affected by CVE-2026-32473?
The vulnerability affects the PDF Smart Viewer for Elementor plugin in versions up to 1.0.4.
What does this flaw allow an unauthenticated attacker to do?
It allows a remote unauthenticated attacker to send arbitrary internal network requests through the server.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.