Skip to main content

Google Doc Embedder

3 CVEs product

Monthly

CVE-2012-4915 May 29, 14:19 MEDIUM POC THREAT This Month

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.4%.

PHP WordPress Path Traversal Google Google Doc Embedder
NVD Exploit-DB
CVSS 2.0
5.0
EPSS
77.4%
Threat
4.8
CVE-2015-1879 Feb 19, 15:59 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS Google Google Doc Embedder
NVD
CVSS 2.0
4.3
EPSS
0.2%
CVE-2014-9173 Dec 02, 16:59 HIGH POC This Week

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi Google Wordpress Plugin +2
NVD Exploit-DB
CVSS 2.0
7.5
EPSS
2.8%
EPSS 77% 4.8 CVSS 5.0
MEDIUM POC THREAT This Month

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.4%.

PHP WordPress Path Traversal +2
NVD Exploit-DB
EPSS 0% CVSS 4.3
MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

PHP WordPress XSS +2
NVD
EPSS 3% CVSS 7.5
HIGH POC This Week

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress SQLi +4
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy