Pricing
Case studies
Login
Start trial
Document Embedder
bPlugins
Developer
2.5.0
Latest version
9,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
1 present
6 patched
4 Mitigation rules
Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting vulnerability
<= 2.4.0
27/10/2026
Cross Site Scripting (XSS) vulnerability
<= 2.5.0
09/10/2026
Unauthenticated Private Document Download vulnerability
< 2.3.1
28/08/2026
Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion vulnerability
<= 2.0.4
28/01/2026
Missing Authorization to Unauthenticated Document Manipulation vulnerability
<= 2.0.0
05/11/2025
Unauthenticated Arbitrary Private/Draft Post Title Disclosure vulnerability
<= 1.7.4
03/01/2022
Arbitrary Private/Draft Post Title Disclosure vulnerability
<= 1.7.6
03/01/2022