WordPress plugin

PDF Embedder – PDF Viewer & Embed PDF Files for WordPress security & vulnerabilities

Q: Is any PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerability listed in CISA KEV?

No. None of the known PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerabilities is currently listed in the CISA KEV catalog.

pdf-embedder— active installsLast vulnerability May 27, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

3Known vulnerabilities

Critical0
High0
Medium3
Low0

Vulnerabilities per year

All PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerabilities

PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerabilities
Severity	Vulnerability	CVE	Published
Medium4.3	Authenticated (Contributor+) Information Exposure via Block Editor Page ≤4.9.3Update to 5.0.0	CVE-2026-7526	May 27
Medium6.4	Arbitrary JavaScript Execution ≤0.21.5Update to 0.21.6	CVE-2024-4367	May 20, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤4.6.4Update to 4.7.1	CVE-2024-29141	Mar 18, 2024

Medium4.3
Authenticated (Contributor+) Information Exposure via Block Editor Page
≤4.9.3Update to 5.0.0
CVE-2026-7526May 27
Medium6.4
Arbitrary JavaScript Execution
≤0.21.5Update to 0.21.6
CVE-2024-4367May 20, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.6.4Update to 4.7.1
CVE-2024-29141Mar 18, 2024

PDF Embedder – PDF Viewer & Embed PDF Files for WordPress: common questions

Does PDF Embedder – PDF Viewer & Embed PDF Files for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in PDF Embedder – PDF Viewer & Embed PDF Files for WordPress: 3 medium. At least one is not fixed in the latest version.

How do I check which version of PDF Embedder – PDF Viewer & Embed PDF Files for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerability?

CVE-2026-7526, published May 27, 2026: PDF Embedder <= 4.9.3 - Authenticated (Contributor+) Information Exposure via Block Editor Page. Severity: Medium (CVSS 4.3).

Is any PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerability listed in CISA KEV?

No. None of the known PDF Embedder – PDF Viewer & Embed PDF Files for WordPress vulnerabilities is currently listed in the CISA KEV catalog.