Known vulnerabilities in Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files

Embed PDF, DOC, PPT and XLS documents easily on your WordPress website with the help of Google Docs Viewer or Microsoft Office Online.

5Reported vulnerabilities

6.4Highest CVSS score

2.7.14Latest version

50,000+Active installs

What to do now

Update Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files to 2.7.14 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-12885	Medium 6.4	0.3%	2.7.10 and earlier	`2.7.11`	December 17, 2025
CVE-2025-1043	Medium 6.4	0.3%	0 to 2.7.5 (inclusive)	`2.7.6`	February 20, 2025
CVE-2023-23707	Medium 6.4	0.4%	2.7.1 and earlier	`2.7.2`	March 14, 2023
CVE-2026-18558	Medium 6.4	0.2%	0 to 2.7.13 (inclusive)	`2.7.14`	October 10, 2026
CVE-2025-60099	Medium 6.4	0.2%	2.7.7 and earlier	`2.7.8`	September 26, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.