Extension WordPress
Vulnérabilités Document Embedder – Embed PDFs, Word, Excel, and Other Files
Cette page rassemble les failles publiées pour Document Embedder – Embed PDFs, Word, Excel, and Other Files, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Document Embedder – Embed PDFs, Word, Excel, and Other Files
4 fiches
Document Embedder <= 2.0.4 – Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion
The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.4. This is due to the plugin not verifying that…
*-2.0.4
2.0.5
27/01/2026
Document Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 – Missing Authorization to Unauthenticated Document Manipulation
The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to unauthorized access/modification/loss of data in all versions up to, and including, 2.0.0. This is due to the plugin not properly verifying…
*-2.0.0
2.0.1
04/11/2025
Document Embedder <= 1.7.8 – Subscriber+ Arbitrary Private/Draft Post Title Disclosure
The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.
[*, 1.7.9)
1.7.9
03/01/2022
Document Embedder < 1.7.6 – Sensitive Data Exposure
The Document Embedder WordPress plugin before 1.7.6 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.
[*, 1.7.5)
1.7.6
03/01/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.