Bplugins Document Embedder vulnerabilities

• bplugins document embedder – let visitors read files without downloading Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute CVE-2026-109370 6.4 MediumOctober 28, 2026
• bplugins document embedder WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-62037 7.1 HighOctober 10, 2026
• bplugins document embedder – embed pdfs, word, excel, and other files Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion CVE-2026-1389 4.3 MediumJanuary 28, 2026
• bplugins document embedder – embed pdfs, word, excel, and other files Document Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 - Missing Authorization to Unauthenticated Document Manipulation CVE-2025-12384 8.6 HighNovember 5, 2025