Login Request a demo
MP
Product
Mpdf
by Mpdf Project · last CVE Jan 13, 2026
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 1
Severity
All severities4Critical1High1Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mpdf to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-19047
10.0
2%
Nov 7
mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that triggers a call to…
Affected: through 7.1.6
CVE-2019-1000005
8.8
2%
Feb 4
mPDF version 7.1.7 and earlier contains a CWE-502: Deserialization of Untrusted Data vulnerability in getImage() method of Image/ImageProcessor class that can result in Arbitry…
Affected: through 7.1.7
CVE-2022-50897
5.5
1%
Jan 13
mPDF 7.0 - Local File Inclusion
Affected: 7.0.0
CVE-2024-26476
3.5
0%
Feb 28
An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php component
Affected: before 7.0.2
Showing 4