Google Document Embedder
by WordPress
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-10882 | Hig | 0.57 | 8.8 | 0.01 | Aug 14, 2019 | The google-document-embedder plugin before 2.6.2 for WordPress has CSRF. | ||
| CVE-2024-0216 | Med | 0.42 | 6.4 | 0.00 | Apr 30, 2024 | The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary… | ||
| CVE-2016-10881 | Med | 0.40 | 6.1 | 0.01 | Aug 14, 2019 | The google-document-embedder plugin before 2.6.2 for WordPress has XSS. | ||
| CVE-2016-10880 | Med | 0.40 | 6.1 | 0.01 | Aug 14, 2019 | The google-document-embedder plugin before 2.6.1 for WordPress has XSS. | ||
| CVE-2012-4915 | 0.07 | — | 0.50 | May 29, 2014 | Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php. | |||
| CVE-2015-1879 | 0.00 | — | 0.02 | Feb 19, 2015 | Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php. | |||
| CVE-2014-9173 | 0.00 | — | 0.05 | Dec 2, 2014 | SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter. |
- risk 0.57cvss 8.8epss 0.01
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF.
- risk 0.42cvss 6.4epss 0.00
The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary…
- risk 0.40cvss 6.1epss 0.01
The google-document-embedder plugin before 2.6.2 for WordPress has XSS.
- risk 0.40cvss 6.1epss 0.01
The google-document-embedder plugin before 2.6.1 for WordPress has XSS.
- CVE-2012-4915May 29, 2014risk 0.07cvss —epss 0.50
Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to libs/pdf.php.
- CVE-2015-1879Feb 19, 2015risk 0.00cvss —epss 0.02
Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php.
- CVE-2014-9173Dec 2, 2014risk 0.00cvss —epss 0.05
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.