CVE-2019-1000031

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-27 · updated 2026-06-17
Weakness: CWE-401

Description

A disk space or quota exhaustion issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. Visiting PDF generation link but not following the redirect will leave behind a PDF file on disk which will never be deleted by the plug-in.

Affected products

article2pdf Wordpress plug-in: from 0.24 through 0.27

References

http://packetstormsecurity.com/files/152236/WordPress-article2pdf-0.24-DoS-File-Deletion-Disclosure.html
https://seclists.org/bugtraq/2019/Mar/49
https://wpvulndb.com/vulnerabilities/9246
http://packetstormsecurity.com/files/152236/WordPress-article2pdf-0.24-DoS-File-Deletion-Disclosure.html
https://seclists.org/bugtraq/2019/Mar/49
https://wpvulndb.com/vulnerabilities/9246

Get alerted when CVE-2019-1000031 or the next vulnerability affects your stack