CVE Database /
CVE-2026-7526
CVE · Medium
CVE-2026-7526 — PDF Embedder – PDF Viewer & Embed PDF Files for WordPress [pdf-embedder] < 5.0.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-7526
|
PDF Embedder – PDF Viewer & Embed PDF Files for WordPress [pdf-embedder] < 5.0.0 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
4.3
|
< 5.0.0
|
5.0.0 |
2026-05-27 |
—
|
CVE-2026-7526
A security flaw exists in PDF Embedder plugin for WordPress, affecting all versions up to 4.9.3. This vulnerability allows authorized users with contributor-level access or higher to obtain sensitive information from the enqueue_block_assets function. In installations where the premium add-on is enabled, license keys are also exposed, but on Lite-only setups, only non-sensitive configuration data like viewer settings and tracking options are accessible.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings