Vulnerabilities

TI-2026-41287 CVE-2026-57350 · GHSA-v8f6-4wvm-6rp8

WordPress WP Debugging plugin <= 2.12.2 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in WP Debugging <= 2.12.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-02 No fix listed CWE-79

TI-2026-24877 CVE-2026-32349 · GHSA-8q29-m4vm-fr8f

WordPress Embed PDF Viewer plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability

LOW 22

Server-Side Request Forgery (SSRF) vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer allows Server Side Request Forgery.This issue affects Embed PDF Viewer: from n/a through <= 2.4.7.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00176 Published 2026-03-13 No fix listed CWE-918

TI-2024-37226 CVE-2024-56256 · GHSA-g4x4-cxv7-86m6

WordPress Embed PDF Viewer plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer.This issue affects Embed PDF Viewer: from n/a through <= 2.3.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00246 Published 2024-12-31 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Debugging plugin <= 2.12.2 - Cross Site Scripting (XSS) vulnerability

WordPress Embed PDF Viewer plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability

WordPress Embed PDF Viewer plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability