CVE-2019-19589

The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued that "The vulnerability reported in PDF Embedder Plugin is not valid as the plugin itself doesn't control or manage the file upload...

Design/Logic Flaw

DISPUTED The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued that "The vulnerability reported in PDF Embedder Plugin is not valid as the plugin itself doesn't control or manage the file...

CVE-2019-19589

The CVE-2019-19589 affects the Lever PDF Embedder plugin for WordPress (v4.4). The vulnerability stems from the plugin not blocking polyglot PDF documents that are valid JAR archives during distribution, with the upload process controlled by WordPress core rather than the plugin itself. This mean...

CVE-2019-19589

The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued that "The vulnerability reported in PDF Embedder Plugin is not valid as the plugin itself doesn't control or manage the file upload...

CVE-2019-19589

The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued that "The vulnerability reported in PDF Embedder Plugin is not valid as the plugin itself doesn't control or manage the file upload...

PT-2019-15878 · Lever +1 · Lever Pdf Embedder +1

Name of the Vulnerable Software and Affected Versions: The Lever PDF Embedder plugin version 4.4 for WordPress Description: The issue concerns the distribution of polyglot PDF documents that are valid JAR archives. However, it has been argued that the plugin itself does not control the file uploa...

WordPress Google Doc Embedder Plugin < 2.6.2 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113474";...

WordPress Google Doc Embedder Plugin < 2.6.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113473";...

CVE-2016-10880

The google-document-embedder plugin before 2.6.1 for WordPress has XSS...

CVE-2016-10882

The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...

CVE-2016-10881

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

CVE-2016-10880

The google-document-embedder plugin before 2.6.1 for WordPress has XSS...

CVE-2016-10881

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

Cross site scripting

The google-document-embedder plugin before 2.6.1 for WordPress has XSS...

Cross site scripting

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...

Cross site request forgery (csrf)

The google-document-embedder plugin before 2.6.2 for WordPress has CSRF...

CVE-2016-10880

The google-document-embedder plugin before 2.6.1 for WordPress has XSS...

CVE-2016-10880

The CVE-2016-10880 entry concerns the WordPress plugin google-document-embedder . The vulnerable component is the plugin prior to version 2.6.1 , which is affected by a XSS flaw. Red Hat and multiple scanners corroborate the same issue. The exact root cause details are not provided in the documen...

CVE-2016-10881

The CVE-2016-10881 entry concerns the WordPress Google Document Embedder plugin prior to version 2.6.2, which is reported to have an XSS vulnerability. Since multiple connected sources (RH advisory, NVD/NVD-derived entries, and OpenVAS data) confirm the same issue but do not provide vendor-specif...

CVE-2016-10881

The google-document-embedder plugin before 2.6.2 for WordPress has XSS...