Description
Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| bPlugins | Document Embedder | ≤ 2.4.0 | — |
High · 7.1
CVE-2026-62037
EUVD-2026-96471GHSA-2wp9-wcq4-wrjg
WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack