PLUGIN SECURITY
Is Pdf Embedder safe?
Embed PDF files in WordPress posts and pages with a responsive PDF viewer block, live Block Editor preview, and no third-party services.
What this plugin does
- Slug:
pdf-embedder - Author: Syed Balkhi
- 300000+ active installs
- 94/100 rating (518 reviews on wordpress.org)
- 5588156 all-time downloads
- On WordPress.org since 2015-01-21
blockdocumentsembed pdfpdfpdf viewer
Maintenance status
- Latest known version: 5.0.1
- Last updated: 2026-08-14 4:59pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
4 known CVEs on file for Pdf Embedder. Reported between 2019 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-7526 | PDF Embedder – PDF Viewer & Embed PDF Files for WordPress [pdf-embedder] < 5.0.0 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 4.3 | < 5.0.0 | 5.0.0 | 2026-05-27 | ✓ fixed in latest |
| CVE-2024-4367 | PDF Embedder – PDF Viewer & Embed PDF Files for WordPress [pdf-embedder] < 4.8.0 | Improper Check for Unusual or Exceptional Conditions | Unknown | < 4.8.0 | 4.8.0 | 2024-05-14 | ✓ fixed in latest |
| CVE-2024-29141 | PDF Embedder – PDF Viewer & Embed PDF Files for WordPress [pdf-embedder] < 4.7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.5 | < 4.7.1 | 4.7.1 | 2024-03-18 | ✓ fixed in latest |
| CVE-2019-19589 | PDF Embedder – PDF Viewer & Embed PDF Files for WordPress [pdf-embedder] <= 4.4 | Interpretation Conflict | Critical 9.8 | < 4.4 | 4.4 | 2019-12-05 | ✓ fixed in latest |
How to fix it
Keep Pdf Embedder updated — 5.0.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents — 100000+ active installs — 96/100 (306) — max PHP 8.4
- PDF Poster – let visitors read PDFs without leaving the page — 20000+ active installs — 90/100 (146) — max PHP 8.4
- Pdf Embed — 10000+ active installs — 100/100 (6) — max PHP 8.4
- Document Embedder – let visitors read files without downloading — 9000+ active installs — 98/100 (119) — max PHP 8.4
- Document Gallery — 8000+ active installs — 96/100 (112)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.