CVE-2026-39719

An unauthenticated Server Side Request Forgery (SSRF) vulnerability exists in PDF Smart Viewer for Elementor versions 1.0.4 and earlier, allowing attackers to send unauthorized requests from the server to internal or external resources. This could lead to exposure of sensitive data or further exploitation of the server environment. Organizations using affected versions of this plugin should prioritize immediate updates to mitigate potential risks.