CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10881 – Google Doc Embedder <= 2.6.1 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2016-10881
The google-document-embedder plugin before 2.6.2 for WordPress has XSS. El plugin google-document-embedder versiones anteriores a 2.6.2 para WordPress, presenta una vulnerabilidad de tipo XSS. • https://wordpress.org/plugins/google-document-embedder/#developers • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10882 – Google Doc Embedder <= 2.6.1 - Cross-Site Request Forgery
https://notcve.org/view.php?id=CVE-2016-10882
The google-document-embedder plugin before 2.6.2 for WordPress has CSRF. El plugin google-document-embedder versiones anteriores a 2.6.2 para WordPress, presenta una vulnerabilidad de tipo CSRF. The Google Doc Embedder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.6.1. This makes it possible for unauthenticated attackers to conduct attacks such as cross-site scripting via forged request granted they can trick a site administrator into performing an action such as clicking on a link. • https://wordpress.org/plugins/google-document-embedder/#developers • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10880 – Google Doc Embedder <= 2.6 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2016-10880
The google-document-embedder plugin before 2.6.1 for WordPress has XSS. El plugin google-document-embedder versiones anteriores a 2.6.1 para WordPress, presenta una vulnerabilidad de tipo XSS. • https://wordpress.org/plugins/google-document-embedder/#developers • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2015-1879 – Google Doc Embedder <= 2.5.18 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2015-1879
Cross-site scripting (XSS) vulnerability in the Google Doc Embedder plugin before 2.5.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the profile parameter in an edit action in the gde-settings page to wp-admin/options-general.php. Vulnerabilidad de XSS en el plugin Google Doc Embedder anterior a 2.5.19 para WordPress permite a atacantes remotos inyectar secuencias de comandos web arbitrarios o HTML a través del parámetro profile en una acción de editar en la página gde-settings en wp-admin/options-general.php. • http://packetstormsecurity.com/files/130309/WordPress-Google-Doc-Embedder-2.5.18-Cross-Site-Scripting.html http://www.securityfocus.com/bid/72547 https://wordpress.org/plugins/google-document-embedder/changelog • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 5CVE-2014-9173 – Google Doc Embedder < 2.5.17 - SQL Injection
https://notcve.org/view.php?id=CVE-2014-9173
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter. Vulnerabilidad de inyección SQL en view.php en el plugin Google Doc Embedder anterior a 2.5.15 para WordPress permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro gpid. • https://www.exploit-db.com/exploits/35447 https://www.exploit-db.com/exploits/35371 http://osvdb.org/show/osvdb/115044 http://security.szurek.pl/google-doc-embedder-2514-sql-injection.html http://www.exploit-db.com/exploits/35371 https://exchange.xforce.ibmcloud.com/vulnerabilities/98944 https://plugins.trac.wordpress.org/changeset/1023572/google-document-embedder • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •