Unknown Document Embedder vulnerabilities

• bplugins document embedder WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-62037 7.1 HighOctober 10, 2026
• unknown document embedder Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle CVE-2026-16567 5.3 MediumAugust 27, 2026