4 matches found
CVE-2016-10880
The google-document-embedder plugin before 2.6.1 for WordPress has XSS.
CVE-2016-10881
The google-document-embedder plugin before 2.6.2 for WordPress has XSS.
CVE-2016-10882
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF.
CVE-2014-9173
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.