Unauthorized Access in Document Embedder Plugin for WordPress
CVE-2025-12384
8.6HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 5 November 2025
What is CVE-2025-12384?
The Document Embedder plugin for WordPress is susceptible to unauthorized access, allowing unauthenticated attackers to exploit multiple functions, including 'bplde_save_document_library', 'bplde_get_all', 'bplde_get_single', and 'bplde_delete_document_library'. This vulnerability enables attackers to create, read, update, and delete arbitrary document library posts, potentially leading to data loss and compromised document security. Users are encouraged to update to the latest version to mitigate risks associated with this vulnerability.
Affected Version(s)
Document Embedder – Embed PDFs, Word, Excel, and Other Files * <= 2.0.0