CVE-2021-24684

HIGH 8.8CVE-2021-24684 · Published 18/10/2021 · updated 17/06/2026

In short

CVE-2021-24684 is a HIGH (CVSS 8.8) vulnerability affecting pdf-light-viewer (teamlead).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
Fix: update to 1.4.12 or later.

Package	Affected versions	Patched versions
pdf-light-viewer teamlead	`< 1.4.12`	`1.4.12`

Description

The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS command on the server via OS Command Injection when invoking Ghostscript.

References

wpscan.com/vulnerability/b5295bf9-8cf6-416e-b215-074742a5fc63 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free