Skip to content
PluginCanary

EmbedPress

by WPDeveloper · 100,000+ active installs · Checked 3 Nov 2026
Healthy7 Warnings

Healthy: vulnerability published 2 Oct 2026, fixed in 4.6.7.

85/ 100 Canary Score
Sub-scores for EmbedPress
Ownership100
Maintenance100
Security60
Support83
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 4.6.7. Update to version 4.6.7 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Sep 2026, fixed in 4.6.7. Update to version 4.6.7 or later.28 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 25 Sep 2026, fixed in 4.6.7. Update to version 4.6.7 or later.25 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 4.6.6. Update to version 4.6.6 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 5 Sep 2026, fixed in 4.6.4. Update to version 4.6.4 or later.5 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 4.6.4. Update to version 4.6.4 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 4.6.4. Update to version 4.6.4 or later.3 Sep 2026Evidence
  • InfoSEC-312 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
andergmartins12 Jun 2018 to 12 Mar 2019, 18 commits
embedpress5 Mar 2019 to 11 Nov 2019, 25 commits
Asif2BD2 Mar 2020 to 12 Sep 2021, 41 commits
re_enter_rupok4 Mar 2020 to 18 Mar 2020, 3 commits
wpdevteam23 Mar 2021 to 29 Oct 2026, 145 commits
priyomukul23 May 2023 to 1 Sep 2026, 21 commits

6 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
6 days ago
Releases, 24 months
51
Tested up to
7.1.4 vs 7.1
Requires PHP
5.6 supported 8.2+
Releases per quarter for EmbedPress
Q1 20248
Q2 20248
Q3 202410
Q4 20247
Q1 20257
Q2 20256
Q3 20256
Q4 20255
Q1 20264
Q2 20267
Q3 20268
Q4 20263

Last release 29 Oct 2026. Tested with the current WordPress version.

Support

Resolved support threads by month for EmbedPress
Nov 202683%

83% of 6 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
2 Oct 2026EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute6.4<= 4.6.64.6.70
28 Sep 2026EmbedPress 4.4.9 - 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.44.4.9 to 4.6.64.6.70
25 Sep 2026EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.6.64.6.70
17 Sep 2026EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters6.1<= 4.6.54.6.60
5 Sep 2026EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents 4.6.0 - 4.6.3 - Missing Authorization4.34.6.0 to 4.6.34.6.40
3 Sep 2026EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents 4.6.0 - 4.6.3 - Unauthenticated Paid API Consumption and Database Row Injection5.34.6.0 to 4.6.34.6.40
3 Sep 2026EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents 4.6.0 - 4.6.3 - Missing Authorization to Authenticated (Contributor+) Site-Wide Places Library Modification4.34.6.0 to 4.6.34.6.40
3 Aug 2026EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.5.64.6.00
27 Jul 2026EmbedPress <= 4.6.0 - Unauthenticated Blind Server-Side Request Forgery7.2<= 4.6.04.6.10
5 Jun 2026EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute6.4<= 4.5.34.5.40
1 Jun 2026EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more <= 4.5.2 - Unauthenticated Information Exposure5.3<= 4.5.24.5.30
27 Nov 2024EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'6.4<= 4.1.34.1.40
24 Oct 2024EmbedPress <= 4.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.0.144.1.00
26 Aug 2024EmbedPress <= 4.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.0.84.0.90
16 Aug 2024EmbedPress <= 4.0.9 - Unauthenticated Local File Inclusion9.8<= 4.0.94.0.100
11 Jul 2024EmbedPress <= 4.0.4 - Missing Authorization5.3<= 4.0.44.0.50
12 Jun 2024EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL6.4<= 3.9.103.9.110
4 Jun 2024EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget6.4<= 4.0.14.0.20
22 May 2024EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Insufficient Authorization Checks to Block Usual4.3<= 3.9.123.9.130
20 May 2024PDF.js < 4.2.67 - Arbitrary JavaScript Execution6.4<= 4.0.24.0.323
9 May 2024EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4<= 3.9.163.9.170
5 Apr 2024EmbedPress <= 3.9.8 - Missing Authorization via handle_calendly_data5.3<= 3.9.83.9.90
5 Apr 2024EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 3.9.143.9.150
5 Apr 2024EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block6.4<= 3.9.143.9.150
5 Apr 2024EmbedPress <= 3.9.11 - Missing Authorization5.3<= 3.9.113.9.120

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for EmbedPress
Q1 20264.3
Q2 20264.8
Q3 20265.0

Average rating rose from 4.3 to 5.0 between Q1 2026 and Q3 2026.

Rating distribution
5 star291
4 star3
3 star3
2 star1
1 star9
Latest low reviews

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for EmbedPress
4 May 202643,942
11 May 202640,417
18 May 202624,794
25 May 202649,959
1 Jun 202611,131
8 Jun 202650,994
15 Jun 202610,667
22 Jun 202646,208
29 Jun 202610,387
6 Jul 202650,645
13 Jul 202630,065
20 Jul 202647,715
27 Jul 202630,436
3 Aug 202653,443
10 Aug 202610,110
17 Aug 202653,794
24 Aug 20268,474
31 Aug 202650,339
7 Sep 20269,777
14 Sep 202652,861
21 Sep 202650,105
28 Sep 202612,157
5 Oct 202649,575
12 Oct 202611,423
19 Oct 202648,984
26 Oct 202650,034
2 Nov 20262,548

Weekly downloads over the last 4 weeks are 16% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

PDF Embedder - PDF Viewer & Embed PDF Files for WordPressScore 91 · 300,000+Pdf EmbedScore 91 · 10,000+PDF Viewer Block for GutenbergScore 91 · 10,000+Wonder PDF EmbedScore 91 · 8,000+Document Embedder Addons for Elementor - Embed Documents in Elementor WebsitesScore 91 · 6,000+

Facts

Version4.7.1
AuthorWPDeveloper
Added6 Sep 2016
Last updated29 Oct 2026
Active installs100,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP5.6
CategoryContent Management > Blog & Article Publishing
Tagsembed, embed pdf, google docs, social feeds, Embed youtube

Other plugins by this author: Disable Comments, Essential Addons for Elementor - Popular Elementor Templates & Widgets, Templately - Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!, Simple 301 Redirects by BetterLinks - Easy Redirect Manager, Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns, NotificationX - FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar, BetterDocs - AI Documentation, Knowledge Base, MCP Server, Docs, Wikis, FAQ & Chatbot, BetterLinks - Link Shortener, Link Cloaking, Redirects, Affiliate Link Manager & MCP, Disable Feeds, ThinkRank SEO - AI SEO Plugin for SEO & Google Search Console, Table Of Contents Block, xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN

Questions

Is EmbedPress still maintained?

EmbedPress was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is EmbedPress safe?

EmbedPress has no open unpatched vulnerabilities on record. 12 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns EmbedPress?

The wordpress.org author is WPDeveloper. Recent committers: wpdevteam, priyomukul, Asif2BD, re_enter_rupok, embedpress. We have recorded no ownership change.

What can I use instead of EmbedPress?

Plugins in the same category with a higher Canary Score: PDF Embedder - PDF Viewer & Embed PDF Files for WordPress, Pdf Embed, PDF Viewer Block for Gutenberg, Wonder PDF Embed, Document Embedder Addons for Elementor - Embed Documents in Elementor Websites.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue