Threat Database

Threat Entry Updated 2026-06-17

Google Doc Embedder - Server-Side Request Forgery (SSRF) (CVE-2024-0216)

The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

PLUGIN Google Doc Embedder

CVE-2024-0216

MEDIUM CVSS 6.4 2024-04-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Google Doc Embedder - Cross-Site Request Forgery (CSRF) (CVE-2016-10882)

The google-document-embedder plugin before 2.6.2 for WordPress has CSRF.

PLUGIN Google Doc Embedder

CVE-2016-10882

HIGH CVSS 8.8 2019-08-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Google Doc Embedder - Cross-Site Scripting (XSS) (CVE-2016-10881)

The google-document-embedder plugin before 2.6.2 for WordPress has XSS.

PLUGIN Google Doc Embedder

CVE-2016-10881

MEDIUM CVSS 6.1 2019-08-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Google Doc Embedder - Cross-Site Scripting (XSS) (CVE-2016-10880)

The google-document-embedder plugin before 2.6.1 for WordPress has XSS.

PLUGIN Google Doc Embedder

CVE-2016-10880

MEDIUM CVSS 6.1 2019-08-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Google Doc Embedder - Cross-Site Scripting (XSS) (CVE-2015-1879)

Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php.

PLUGIN Google Doc Embedder

CVE-2015-1879

MEDIUM CVSS 4.3 2015-02-19

Risk Score

Open Full Technical Breakdown