Unauthenticated File Download in Document Embedder WordPress Plugin

Executive Summary

This vulnerability affects the WordPress plugin Document Embedder before version 2.3.1. It allows unauthenticated attackers to download arbitrary documents, including private or draft ones, by exploiting a flaw where the plugin does not check a document's status before issuing a download token and streaming the file. Attackers can access documents by enumerating document IDs.

Useful 0 Not Useful 0

Detection Guidance

Check if your WordPress site uses the Document Embedder plugin version prior to 2.3.1. Inspect network traffic for unauthorized document downloads or unusual access patterns to document endpoints.

Useful 0 Not Useful 0

Impact Analysis

If you use the affected Document Embedder plugin, attackers could access sensitive documents you intended to keep private or unpublished. This includes confidential files, draft content, or restricted materials, potentially leading to data leaks or unauthorized disclosures.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by exposing protected or personal data. Unauthorized access to private documents may violate confidentiality requirements, leading to legal penalties, fines, or reputational damage for organizations handling sensitive information.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Document Embedder plugin to version 2.3.1 or later immediately. Review document access logs for suspicious activity and restrict unauthenticated access to sensitive documents.

Useful 0 Not Useful 0