Skip to content
OpenAdvisories

Vendor

awsmin

3 known vulnerabilities.

Products

Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-18558

    Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode

    The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embeddoc' shortcode in all versions up to, and including, 2.7.13 due to insufficient input sanitization and output …

    awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files Web / CMS
  • Medium 6.4
    CVE-2025-12885

    Embed Any Document <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitize_pdf_src function regex bypass in all versions up to, and including, 2.7.10 due to insufficient input saniti…

    awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files Web / CMS
  • Medium 6.4
    CVE-2025-1043

    Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 - Authenticated (Contributor+) Blind Server-Side Request Forgery via embeddoc Shortcode

    The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.5 via the 'embeddoc' shortcode. This makes it possible for authenticated attackers…

    awsmin Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files Web / CMS