Extension WordPress
Vulnérabilités Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
Cette page rassemble les failles publiées pour Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files
4 fiches
Embed Any Document <= 2.7.10 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitize_pdf_src function regex bypass in all versions up to, and including, 2.7.10 due to insufficient…
*-2.7.10
2.7.11
17/12/2025
Embed Any Document <= 2.7.7 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Embed Any Document plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-2.7.7
2.7.8
26/09/2025
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 – Authenticated (Contributor+) Blind Server-Side Request Forgery via embeddoc Shortcode
The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.5 via the 'embeddoc' shortcode. This makes it possible for…
*-2.7.5
2.7.6
19/02/2025
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.1 – Authenticated (Author+) Stored Cross-Site Scripting via SVG files
The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG files in versions up to, and including, 2.7.1 due to insufficient input sanitization and output…
*-2.7.1
2.7.2
14/03/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.