Plugin icon

Document Embedder – let visitors read files without downloading

document-emberdder

Vulnerabilities:

5

Last Updated:

October 7, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-08-25
Title
Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle
Fixed in
Fixed in 2.3.1
CVSS
5.3 (medium)
Published
2026-01-27
Title
Document Embedder < 2.0.5 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion
Fixed in
Fixed in 2.0.5
CVSS
2.7 (low)
Published
2025-11-04
Title
Document Embedder – Embed PDFs, Word, Excel, and Other Files < 2.0.1 - Missing Authorization to Unauthenticated Document Manipulation
Fixed in
Fixed in 2.0.1
CVSS
8.6 (high)
Published
2022-01-03
Title
Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure
Fixed in
Fixed in 1.7.5
CVSS
5.3 (medium)
Published
2022-01-03
Title
Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure
Fixed in
Fixed in 1.7.9
CVSS
4.3 (medium)