CVE-2026-16567 — Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle

CVE-2026-16567

Document Embedder < 2.3.1 - Unauthenticated Private Document Download via Token Oracle PUBLISHED

Description (CNA)

The Document Embedder WordPress plugin before 2.3.1 does not check a document's status before issuing a download token and streaming the file, allowing unauthenticated attackers to download arbitrary Document Embedder WordPress plugin before 2.3.1 documents, including private and draft ones, by enumerating IDs.

Affected (CNA)

Vendor / product	Versions
Unknown / Document Embedder	affected 0 before 2.3.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/abf97927-cee2-44f4-a495-c7571d43be95/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.