awsmin

Products

ProductCVEsExploitedLatest
Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files3–Oct 10, 2026

Exploited and recent CVEs

  • CVE-2026-18558 Medium 6.4 Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode 0.2%
  • CVE-2025-12885 Medium 6.4 Embed Any Document <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-1043 Medium 6.4 Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files <= 2.7.5 - Authenticated (Contributor+) Blind Server-Side Request Forgery via embeddoc Shortcode 0.3%