Input validation vulnerability in EmbedPress 4.0.0

PDF.js has a security issue that allows unauthorized people to run harmful code on versions older than 4.2.67. This happens because the program doesn’t check the type of fonts it uses. This means that someone with certain permissions can trick someone into opening a specific PDF document and run their own code.

Detected in:

ARI Fancy Lightbox – Popup for WordPress fixed vulnerable versions:
ARI Fancy Lightbox – WordPress Popup fixed vulnerable versions: >= * <= 1.3.14
PDF Embedder fixed vulnerable versions: >= * <= 4.7.1
PDF Poster- PDF Embedder Plugin fixed vulnerable versions:
PDF.js Viewer fixed vulnerable versions: >= * <= 2.1.8.1
Wonder PDF Embed fixed vulnerable versions: >= * <= 2.7
BSK PDF Manager open vulnerable versions: >= * <= 3.6
PDF Viewer for Elementor open vulnerable versions: >= * <= 2.9.3
PDF viewer for Elementor & Gutenberg open vulnerable versions: >= * <= 1.3.2
Tainacan open vulnerable versions: >= * <= 0.21.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.