Yumpu E-Paper publishing

Yumpu E-Paper publishing has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Yumpu E-Paper publishing has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Yumpu E-Paper publishing is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Yumpu E-Paper publishing vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-12621

Yumpu E-Paper publishing <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-01-08 21:59	Yumpu E-Paper publishing <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Yumpu E-Paper publishing <= 3.0.8	`CVE-2024-12621`	6.4 Medium	Muhammad Yudha - DJ	Yes
2024-05-29 15:50	Yumpu ePaper publishing <= 2.0.24 - Missing Authorization to PDF Upload, Publishing, and API Key Modification Yumpu E-Paper publishing <= 2.0.24	`CVE-2024-3277`	5.0 Medium	Lucio Sá	Yes

Showing 1–2 of 2 reports

Latestv3.0.10

Yumpu E-Paper publishing

Author

YUMPU

3.6(25)

72/100

Last Updated

2025-02-05 (2y ago)

Active Installs

900+

Downloads

42,385

Requires WP

4.6+

Requires PHP

5.6+

Tested up to

WP 6.7.7

Created

2014-11-17 (12y ago)

The YUMPU WordPress Plugin enables you to upload any PDF you want to your website and then converts it into an online readable E-Paper. The E-Paper can be inserted into your posts and pages via shortcodes. Your visitors can read your publications, without having to download the whole document anymore. No installation of any browser-plugins is necessary.

View on WordPress.org