WordPress Plugin Vulnerabilities

Google Document Embedder < 2.6.1 - XSS

Description

The Google Doc Embedder WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
google-document-embedder
Fixed in 2.6.1

References

CVE
CVE-2016-10880

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
80b7f9df-4224-478d-90c7-61941e49dc37

Timeline

Publicly Published
2016-09-22 (about 9 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-03-06
Title
WP Chat App < 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Published
2025-08-06
Title
Cost Calculator < 7.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Published
2021-12-11
Title
AMP for WP < 1.0.77.32 - Admin+ Stored Cross-Site Scripting
Published
2024-11-12
Title
jwp-a11y <= 4.1.7 - Admin+ Stored XSS
Published
2024-05-21
Title
Elegant Addons for elementor <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML tags