PatchTheCVEpdf embedder vulnerabilities and fixes
Recent CVEs affecting pdf embedder, with upgrade or downgrade steps. 1 tracked.
Also searched as: pdfembedder.
pdf embedder has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-12-05. Highest priority: CVE-2019-19589 (score 64/100).
- CVE-2019-19589 CRITICAL 9.8 DOWNGRADE The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that
FAQ
How do I fix pdf embedder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pdf embedder being exploited right now?
None of the tracked pdf embedder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pdf embedder CVE should I patch first?
CVE-2019-19589 currently ranks highest (64/100): The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that.