Embed PDF Viewer

Explore Embed PDF Viewer vulnerabilities across all versions. Currently tracking 3 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Embed PDF Viewer vulnerabilities before they are exploited.

Vulnerability Records

3 records


2026-02-11 00:00	Embed PDF Viewer <= 2.4.7 - Authenticated (Contributor+) Server-Side Request Forgery Embed PDF Viewer <= 2.4.7	`CVE-2026-32349`	6.4 Medium	Mike Montoya	Yes
2024-12-19 00:00	Embed PDF Viewer <= 2.3.1 - Authenticated (Editor+) Stored Cross-Site Scripting Embed PDF Viewer <= 2.3.1	`CVE-2024-56256`	4.4 Medium	Ibnu Ubaeydillah	Yes
2024-10-08 18:54	Embed PDF Viewer <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters Embed PDF Viewer <= 2.4.4	`CVE-2024-9451`	6.4 Medium	tjoffe	Yes

Showing 1–3 of 3 reports

Latestv2.4.8

Embed PDF Viewer

Author

Andy Fragen

4.7(19)

94/100

Last Updated

2026-02-21 (5mo ago)

Active Installs

20,000+

Downloads

321,072

Requires WP

6.0+

Requires PHP

7.4+

Tested up to

WP 7.0.2

Created

2016-03-31 (11y ago)

Embed a PDF from the Media Library or elsewhere via oEmbed or as a block into an iframe tag. The URL only has to be world reachable link. Chrome uses Google Doc Viewer as Chrome seems to automatically rendered embedded JS in PDFs automatically. Uses Google Doc Viewer with mobile. Inspired by Embed PDF and RV Embed PDF. Many thanks to Alex Kirk for making Embed PDF Viewer compatible with the new block editor. Development on GitHub. Pull requests are welcome against the develop branch. Known Issues Occasionally Google Doc Viewer will not correctly load the PDF. Reloading the page should correct the issue, though this may need to be done several times.

View on WordPress.org