WordPress security by component

Google Doc Embedder

Plugin description

Google Doc Embedder is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Dec 02, 2014; the highest CVE/CNA score is 7.5.

Plugin slug: google-doc-embedder

Latest vulnerability

CVE-2014-9173: Google Doc Embedder: SQL injection

Google Doc Embedder is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 02, 2014

Safe version guidanceSee mitigation notes

		Safe version
Dec 02, 2014	CVE-2014-9173 Google Doc Embedder: SQL injection Google Doc Embedder is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.5 NVD7.5
May 29, 2014	CVE-2012-4915 Google Doc Embedder: Filesystem traversal Google Doc Embedder is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE5.0 NVD5.0