Skip to content
PluginCanary

Embed PDF Viewer

by Andy Fragen · 20,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 12 Aug 2026, 4 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for Embed PDF Viewer
Ownership100
Maintenance100
Security90
Support70
Reputation70

How the score works

Quick answers

Is Embed PDF Viewer still maintained?
Yes. Last release 12 Aug 2026, 4 releases in the last 24 months. 12 Aug 2026 · wordpress.org
Who owns Embed PDF Viewer, and has it changed hands?
No change recorded. Main committer afragen since Mar 2016. 3 Nov 2026 · SVN log
Was Embed PDF Viewer removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Embed PDF Viewer safe?
3 known vulnerabilities, all fixed (latest in 2.4.8). Not on the exploited list. 11 Feb 2026 · Wordfence Intelligence
Is the latest Embed PDF Viewer update safe to install?
No ownership change before 2.5.1. No one-star spike after it. 12 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
afragen31 Mar 2016 to 12 Aug 2026, 121 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
3 months ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Embed PDF Viewer
Q1 20240
Q2 20240
Q3 20245
Q4 20242
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20262
Q2 20260
Q3 20262
Q4 20260

Last release 12 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Average rating per quarter for Embed PDF Viewer
Q4 20235.0
Q1 20245.0
Q3 20245.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2024.

Rating distribution
5 star16
4 star1
3 star2
2 star0
1 star0

Security record

2 vulnerabilities in 24 months (3 on record), all patched (latest fixed in 2.4.8).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
11 Feb 2026Embed PDF Viewer <= 2.4.7 - Authenticated (Contributor+) Server-Side Request Forgery6.4<= 2.4.72.4.811
19 Dec 2024Embed PDF Viewer <= 2.3.1 - Authenticated (Editor+) Stored Cross-Site Scripting4.4<= 2.3.12.4.0Patched before disclosure
8 Oct 2024Embed PDF Viewer <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters6.4<= 2.4.42.4.5Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Embed PDF Viewer
4 May 2026618
11 May 2026759
18 May 2026729
25 May 2026708
1 Jun 2026594
8 Jun 2026595
15 Jun 2026531
22 Jun 2026490
29 Jun 2026478
6 Jul 2026497
13 Jul 2026600
20 Jul 2026590
27 Jul 2026612
3 Aug 2026586
10 Aug 202610,135
17 Aug 20262,812
24 Aug 20261,624
31 Aug 20261,448
7 Sep 20261,002
14 Sep 2026993
21 Sep 2026949
28 Sep 2026870
5 Oct 2026859
12 Oct 2026725
19 Oct 20261,138
26 Oct 2026889
2 Nov 2026134

Weekly downloads over the last 4 weeks are 39% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

PDF EmbedderScore 91 · 300,000+Pdf EmbedScore 91 · 10,000+PDF Viewer Block for GutenbergScore 91 · 10,000+flowpaperScore 90 · 10,000+

Facts

Version2.5.1
AuthorAndy Fragen
Added31 Mar 2016
Last updated12 Aug 2026
Active installs20,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryContent Management > Document Management & Downloads
Tagspdf, block, embed, oembed, viewer

Other plugins by this author: Core Rollback, WP Debugging, WordPress Beta Tester, Add Custom Header Images, The Events Calendar Outlook Import Fix, Local Development, The Events Calendar User CSS, oEmbed Gists and Files, Admin Only Jetpack, The Events Calendar PRO Alarm, Test Reports, Skip Updates

Questions

Is Embed PDF Viewer still maintained?

Yes. Last release 12 Aug 2026, 4 releases in the last 24 months.

Who owns Embed PDF Viewer, and has it changed hands?

No change recorded. Main committer afragen since Mar 2016.

Was Embed PDF Viewer removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Embed PDF Viewer safe?

3 known vulnerabilities, all fixed (latest in 2.4.8). Not on the exploited list.

Is the latest Embed PDF Viewer update safe to install?

No ownership change before 2.5.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue