Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: awsm.in Clear all filters
TI-2026-70150 CVE-2026-18558 · GHSA-cm59-2v4c-p8f9

Stored cross-site scripting in Embed Any Document WordPress plugin

Priority LOW 27

The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embeddoc' shortcode in all versions up to, and including, 2.7.13 due to insu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00152 Published 2026-10-10 No fix listed CWE-79
TI-2025-11804 CVE-2025-12885 · GHSA-38q3-29hj-9w26

Embed Any Document <= 2.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitize_pdf_src function regex bypass in all versions up to, and including,…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00255 Published 2025-12-18 No fix listed CWE-79
TI-2025-37465 CVE-2025-60099 · GHSA-9qmx-g4pq-5wvw

WordPress Embed Any Document Plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awsm.in Embed Any Document embed-any-document allows Stored XSS.This issue affects Embed Any Document: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-26 No fix listed CWE-79
TI-2023-24109 CVE-2023-45061 · GHSA-wgg3-6fhx-57cc

WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in awsm.in WP Job Openings wp-job-openings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Openings: from n/a through <= 3.4.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2025-01-02 No fix listed CWE-862