Skip to content
OpenAdvisories

Product · bPlugins

Document Embedder – Embed PDFs, Word, Excel, and Other Files

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-1389

    Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion

    The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.4. This is due to the plugin not verifying that a user has permission to access t…

    bPlugins Document Embedder – Embed PDFs, Word, Excel, and Other Files Web / CMS