CVE-2016-10881

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

WordPress Google Document Embedder Plugin <= 2.6.4 is vulnerable to Server Side Request Forgery (SSRF)

Software Google Document Embedder Type Plugin Vulnerable versions = 2.6.4 Fixed in N/A OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-0216 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID bfeba1aa8dc2 Credits István Márton Required...

WordPress Document Embedder plugin title enumeration vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be...

CVE-2021-24868

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts...

CVE-2021-24775

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

Design/Logic Flaw

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

CVE-2021-24868

The CVE-2021-24868 entry concerns the WordPress Document Embedder plugin prior to 1.7.9. Affected component is the plugin’s AJAX action endpoint, which can be accessed by any authenticated user (e.g., a subscriber) to enumerate the titles of private and draft posts. The root cause is an informati...

CVE-2021-24775 Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

CVE-2021-24775

The Document Embedder WordPress plugin (prior to version 1.7.5) exposes a REST endpoint that allows unauthenticated users to enumerate the titles of private and draft posts. • Affected product: WordPress Document Embedder plugin. • Vulnerable component: REST endpoint implementation (information d...

WordPress 安全漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Document Embedder plugin versions prior to 1.7.5 contain an information disclosure vulnerability that could be exploited to all...

WordPress 安全漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be...

WordPress Document Embedder plugin <= 1.7.4 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure vulnerability

Unauthenticated Arbitrary Private/Draft Post Title Disclosure vulnerability discovered by apple502j in WordPress Document Embedder plugin versions = 1.7.4. Solution Update the WordPress Document Embedder plugin to the latest available version at least 1.7.5...

WordPress Document Embedder plugin <= 1.7.6 - Arbitrary Private/Draft Post Title Disclosure vulnerability

Arbitrary Private/Draft Post Title Disclosure vulnerability discovered by apple502j in WordPress Document Embedder plugin versions = 1.7.6. Solution Update the WordPress Document Embedder plugin to the latest available version at least 1.7.8...

Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure

The plugin contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts. As any authenticated user 1764 being the ID of a private/draft post...

Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

The plugin contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts. https://example.com/wp-json/doc/v1/single/509 509 being the ID of a private/draft Post...

CVE-2016-10880

The google-document-embedder plugin before 2.6.1 for WordPress has XSS...

CVE-2016-10881

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

CVE-2016-10882

The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...

CVE-2016-10880

The google-document-embedder plugin before 2.6.1 for WordPress has XSS...

CVE-2016-10881

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...