Google Doc Embedder

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-1879 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS WordPress Google PHP Google Doc Embedder

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2014-9173 HIGH POC This Week

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi PHP Google Google Doc Embedder

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

2.8%

CVE-2012-4915 MEDIUM POC THREAT This Month

Directory traversal vulnerability in the Google Doc Embedder plugin before 2.5.4 for WordPress allows remote attackers to read arbitrary files via a .. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.4%.

Path Traversal WordPress Google PHP Google Doc Embedder

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

77.4%

Threat

4.8

CVE-2015-1879

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS WordPress Google +2

NVD

CVE-2014-9173

EPSS 3% CVSS 7.5

HIGH POC This Week

WordPress SQLi PHP +2

NVD Exploit-DB

CVE-2012-4915

EPSS 77% 4.8 CVSS 5.0

MEDIUM POC THREAT This Month

Path Traversal WordPress Google +2

NVD Exploit-DB