PDF Smart Viewer for Elementor
PDF Smart Viewer for Elementor has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; none of them are fixed as of October 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Server-Side Request Forgery (SSRF), behind 2 of the records (100%).
None of the 2 issues recorded for PDF Smart Viewer for Elementor have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
2 independent researchers contributed these findings, one record each. PDF Smart Viewer for Elementor is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.11.
CVE-2026-39719PDF Smart Viewer for Elementor <= 1.0.4 - Unauthenticated Server-Side Request Forgery
Read the full analysisVulnerability Records

PDF Smart Viewer for Elementor
Author
DeKnows
elementorA simple PDF viewer widget for Elementor that displays PDFs directly on your website. What It Does Shows PDFs in a clean viewer with zoom controls Works with PDFs uploaded to your site or external URLs Responsive design that works on mobile and desktop Download and print buttons for users Features PDF Rendering: Powered by PDF.js for fast and reliable display Zoom Controls: Zoom in/out with smooth scaling (25% to 300%) Fullscreen Mode: Immersive viewing experience Download & Print: One-click download and print functionality Page Navigation: Intuitive previous/next page controls Responsive Design: Perfect display on all devices Accessibility: Keyboard navigation and screen reader support Custom Styling: Extensive Elementor styling options Multiple Sources: Support for URL and file upload PDF sources Usage Edit a page with Elementor Add the “PDF Smart Viewer” widget Choose your PDF file or enter a PDF URL Customize the settings as needed Settings Go to Settings → PDF Smart Viewer to configure: * Default zoom level * Default height (100% by default) * Which buttons to show Coming Soon Remote PDF Support: Load PDFs from Google Drive, Dropbox, etc. More Features: Thumbnails, search, annotations Support Need help? Contact us at deknows.com Credits Development: Mr. Hamad Khan – Founding Partner – Lead Development and Operations @Deknows Inc Development: Mr. Amanat Ali – WordPress Site Builder @Deknows Inc PDF.js: Mozilla Foundation (https://mozilla.github.io/pdf.js/) Elementor: Elementor Ltd (https://elementor.com/)
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C