The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token and streaming the file, allowing unauthenticated attackers to download arbitrary Document Embedder WordPress plugin before 2.3.1 documents, including private and draft ones, by enumerating IDs.
MEDIUM
Vulnerability intelligence
CVE-2026-16567
CVSS 3.15.3
SeverityMedium
Known exploitedNo
Primary source: NIST National Vulnerability Database