CVE-2026-18558
Summary
by MITRE • 10/10/2026
The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embeddoc' shortcode in all versions up to, and including, 2.7.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 10/10/2026
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxxxx Xxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx X Xxxxxxxxxxx Xxxxxxxx Xxxx Xxxxxxxx Xxxx Xxxxxxxxxx Xxxxx Xxxxxxxxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx. Xxxx Xxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxx Xx Xx Xxx Xxxxxxxxx X.x.xx, Xxxxxxxx Xxxxxxxxx Xxxxxx Xxx Xxxx Xxxxxxxx Xxxxxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxx Xxxxx Xx Xxxxxx Xx Xxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxxx Xxxxxxx. Xxx Xxxx Xxxxxxxxx Xxxxx Xxxx Xx Xxx Xxxxxx'x Xxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxxx-xxxxxxxx Xxxx Xxxxxx Xxxxxxxxxx Xx Xxx Xxxxxxxxx Xxxxxxxxx, Xx Xxxx Xx Xxx Xxxxxxxx Xx Xxxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxx Xxxx Xxxx Xxxx Xx Xxx Xxxxxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxxx X Xxxxxx Xxxxxxx Xxx Xxxxxx Xxxxx-xxxx Xxxxxxxxx Xxxxxxx, Xxxxx Xxxxxxxxx Xxxx Xx Xxxxxxxxxxxx Xxxxxx Xx Xxx Xxxxxx Xxxxxx Xxxxxx Xxxx Xxxxx Xxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxxx Xx Xxxxx Xxxxxxxxx Xxxxxxx.
Xxxx Xx Xxxxxxxxxxx Xxxxxxxxxxx, Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxxx Xxx-xxxxxxxxx Xxxxxxxx Xx Xxxxxxxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxx Xx Xxx Xxxxxx Xxxxxxxxx Xxxxxxxxxxxx. Xxxx X Xxxxxxxxxxx-xxxxx Xxxx Xxxxxxx X Xxxxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxx, Xxxx Xxxxxxx Xxxxxxx Xxxx Xx Xxx Xxxxxxxxxx Xxxxxxx Xxxxxx Xx Xxx Xxxxxxxx. Xxxxxxxxxxxx, Xxxxx Xxxxxxxxxx Xxxxxxx Xxx Xxxxxxxx Xxx Xxxx Xx Xxxx Xxxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx Xxxx Xxxxx Xxxxxxx Xxxxxxx Xxx Xxxxxxxx Xxxxxxx. Xxxx Xxxxxxxxxxx Xxxxxxxxxxxxx Xx Xxxx Xxxxxxxxx Xxx Xxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxx Xx Xxxxxxxx X Xxxxxxx Xxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxx Xxx Xxxxxxx Xxxxxxxxx Xxxxx Xx Xxxxxxxx.
Xxx Xxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xxxxxx Xxxxx-xxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxx Xxxxxx, Xx Xxxx Xxxxx Xxxxxxxx Xxxx Xxx-xx, Xxxxx Xxxxxxxxxx Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxx Xxxxxx Xxx Xxxx Xxxxxxxxxx. Xxxxxxxxxxx, Xx Xxxxx Xx Xxxxxxxx Xxxxxxxxxxxxxx Xxxxx Xxx Xxxxx Xxx&xx Xxxxxxxxx, Xxxx Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxx Xxxxxx-xxxx Xxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxx Xxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxx Xxxx Xx Xxxxxxx Xx Xxxxxxxxxxxxxx Xxxxxx. Xxxxxxxxx Xxx Xxxxxxxx Xxxxx Xxxxxxxxxxxx Xx Xxxxxx Xxxxxxxx, Xxxxxxxx Xxxxx Xx Xxxxxxxxx Xxxxxxxx Xxxxx, Xxxxx Xxxxxxxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxx Xx Xxx Xxxxxx, Xx Xxxx Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxxx Xxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx Xx Xxx Xxxxxxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxx Xxx Xxxxxx'x Xxxxxx Xxxx. Xxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxx Xxxxx-xxxxxxx Xxx Xxx Xxxxxxxxxx Xxxxxx Xx Xxx Xxxxxxxx Xxxxxxxxx, Xxxxxxxx Xxxx Xxxx Xxxxxxxx Xxxx Xxxxx Xxx Xxxx Xxxxxxxxxx Xxx Xxxxxxxxx. Xxxxxxxxxxxx, Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxx-xxxxx Xxxxxx Xxxxxxxx Xx Xxxxxxxxx Xxxxxx Xxx Xxxx-xxxxxxxxxx Xxxx Xx Xxxxxxxx Xx Xxxx Xxxxxxxx Xx Xxxxxxx Xxxxxx Xxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxx, Xx Xx Xxxxxxxx Xx Xxxxxxx Xx X Xxxxxxx Xxxxxxx Xx Xxxx Xx Xxx Xxxxxxx Xxxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxxx Xxxxxxxxxx. Xx Xxx Xxxxxxx, Xxxxxxxxxxx Xxxxxxxxxxx-xxxxx Xxxxxx Xx Xxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx Xxxxxxx Xxx Xxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xxx Xxxx Xxxxxxxx Xxxxxxxx Xxxxx Xxx Xxxxxxxx Xxxxxx Xx Xxxxxxx. Xxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xx Xxxxxx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xx Xxxxxxx Xxxxxxx Xxxxxxxxxxxxxxx Xx Xxxxxx Xxxxxx Xxxxxxxxxxxx Xx Xxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxxxxxxxx.