CVE-2026-32473 is an unauthenticated SSRF vulnerability (CWE-918) in DeKnows PDF Smart Viewer for Elementor affecting versions up to 1.0.4. The flaw allows remote attackers to cause the server to send crafted requests, potentially exposing internal resources or data. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and partial confidentiality and integrity impacts. No known exploits are reported in the wild, and no vendor remediation or patch is currently documented.

An attacker can exploit this SSRF vulnerability without authentication to make the server perform arbitrary requests. This can lead to partial disclosure of sensitive information and modification of data integrity. There is no impact on availability reported. The vulnerability could be leveraged to access internal systems or services not directly accessible to the attacker.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No temporary or official fixes are currently documented.