TI-2024-00194 CVE-2024-0216 · GHSA-jr3w-q7cr-jxm2
Google Doc Embedder <= 2.6.4 - Authenticated (Contributor+) Blind Server Side Request Forgery
Priority LOW 28
The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4.