CVE-2026-18558 | awsmin Embed Any Document Plugin up to 2.7.13 on WordPress Shortcode cross site scripting

October 10, 2026 Yanac

A vulnerability labeled as problematic has been found in awsmin Embed Any Document Plugin up to 2.7.13 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-18558. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More