WP-Safety

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Security & Risk Analysis

wordpress.org/plugins/embed-office-viewer

Embed Word, Excel, PowerPoint, PDF, and more — directly inside your WordPress site using an intuitive, reliable, and powerful document viewer.

2K active installs v2.3.3 PHP 7.1+ WP 6.5+ Updated Feb 15, 2026
document-viewerembed-documentoffice-viewerpdf-viewerpowerpoint-viewer
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Safe to Use in 2026?

Generally Safe

Score 100/100

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The 'embed-office-viewer' plugin v2.3.3 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs, including critical or high-severity ones, and the fact that there are no currently unpatched vulnerabilities is a very positive indicator. Furthermore, the code analysis reveals excellent practices such as 100% of SQL queries using prepared statements and a significant percentage (70%) of outputs being properly escaped, along with a robust number of nonce and capability checks. The limited attack surface with all identified entry points having associated authentication checks is also commendable.

Key Concerns

  • Outputs are not fully escaped (70% proper)
  • Bundled library (Freemius v1.0) is present
Vulnerabilities
None known

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
232
547 escaped
Nonce Checks
13
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared2 total queries

Output Escaping

70% escaped779 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
csf_export (frameworks\codestar-framework\functions\actions.php:62)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 7

authwp_ajax_eovPipeCheckerblock.php:10
noprivwp_ajax_eovPipeCheckerblock.php:11
authwp_ajax_csf-get-iconsframeworks\codestar-framework\functions\actions.php:50
authwp_ajax_csf-exportframeworks\codestar-framework\functions\actions.php:87
authwp_ajax_csf-importframeworks\codestar-framework\functions\actions.php:123
authwp_ajax_csf-resetframeworks\codestar-framework\functions\actions.php:150
authwp_ajax_csf-chosenframeworks\codestar-framework\functions\actions.php:189

Shortcodes 1

[office_doc] inc\Services\Shortcode.php:9
WordPress Hooks 67
actioninitblock.php:7
actionenqueue_block_assetsblock.php:8
actionadmin_initblock.php:12
actionrest_api_initblock.php:13
actionwp_enqueue_scriptsframeworks\codestar-framework\classes\abstract.class.php:20
actionadmin_menuframeworks\codestar-framework\classes\admin-options.class.php:107
actionadmin_bar_menuframeworks\codestar-framework\classes\admin-options.class.php:108
actionnetwork_admin_menuframeworks\codestar-framework\classes\admin-options.class.php:112
filteradmin_footer_textframeworks\codestar-framework\classes\admin-options.class.php:493
actionadd_meta_boxes_commentframeworks\codestar-framework\classes\comment-options.class.php:38
actionedit_commentframeworks\codestar-framework\classes\comment-options.class.php:39
actioncustomize_registerframeworks\codestar-framework\classes\customize-options.class.php:43
actioncustomize_save_afterframeworks\codestar-framework\classes\customize-options.class.php:44
actionwp_enqueue_scriptsframeworks\codestar-framework\classes\customize-options.class.php:48
actionadd_meta_boxesframeworks\codestar-framework\classes\metabox-options.class.php:52
actionsave_postframeworks\codestar-framework\classes\metabox-options.class.php:53
actionedit_attachmentframeworks\codestar-framework\classes\metabox-options.class.php:54
actionwp_nav_menu_item_custom_fieldsframeworks\codestar-framework\classes\nav-menu-options.class.php:30
actionwp_update_nav_menu_itemframeworks\codestar-framework\classes\nav-menu-options.class.php:31
filterwp_edit_nav_menu_walkerframeworks\codestar-framework\classes\nav-menu-options.class.php:33
actionadmin_initframeworks\codestar-framework\classes\profile-options.class.php:30
actionshow_user_profileframeworks\codestar-framework\classes\profile-options.class.php:42
actionedit_user_profileframeworks\codestar-framework\classes\profile-options.class.php:43
actionpersonal_options_updateframeworks\codestar-framework\classes\profile-options.class.php:45
actionedit_user_profile_updateframeworks\codestar-framework\classes\profile-options.class.php:46
actionafter_setup_themeframeworks\codestar-framework\classes\setup.class.php:73
actioninitframeworks\codestar-framework\classes\setup.class.php:74
actionswitch_themeframeworks\codestar-framework\classes\setup.class.php:75
actionadmin_enqueue_scriptsframeworks\codestar-framework\classes\setup.class.php:76
actionwp_enqueue_scriptsframeworks\codestar-framework\classes\setup.class.php:77
actionwp_headframeworks\codestar-framework\classes\setup.class.php:78
filteradmin_body_classframeworks\codestar-framework\classes\setup.class.php:79
actionadmin_footerframeworks\codestar-framework\classes\shortcode-options.class.php:47
actioncustomize_controls_print_footer_scriptsframeworks\codestar-framework\classes\shortcode-options.class.php:48
actionelementor/editor/before_enqueue_scriptsframeworks\codestar-framework\classes\shortcode-options.class.php:59
actionelementor/editor/footerframeworks\codestar-framework\classes\shortcode-options.class.php:60
actionelementor/editor/footerframeworks\codestar-framework\classes\shortcode-options.class.php:61
actionenqueue_block_editor_assetsframeworks\codestar-framework\classes\shortcode-options.class.php:303
actionmedia_buttonsframeworks\codestar-framework\classes\shortcode-options.class.php:307
actionadmin_initframeworks\codestar-framework\classes\taxonomy-options.class.php:41
actionadmin_footerframeworks\codestar-framework\fields\icon\icon.php:41
actioncustomize_controls_print_footer_scriptsframeworks\codestar-framework\fields\icon\icon.php:42
actionadmin_print_footer_scriptsframeworks\codestar-framework\fields\link\link.php:65
actionprint_default_editor_scriptsframeworks\codestar-framework\fields\wp_editor\wp_editor.php:62
actionadmin_footerframeworks\codestar-framework\metabox-free.php:10
actionadmin_menuframeworks\codestar-framework\views\welcome.php:19
filterplugin_action_linksframeworks\codestar-framework\views\welcome.php:20
filterplugin_row_metaframeworks\codestar-framework\views\welcome.php:21
actioninitinc\class-eov.php:15
actionplugins_loadedinc\class-eov.php:16
actionplugins_loadedinc\class-eov.php:17
actionadmin_enqueue_scriptsinc\class-eov.php:18
actionwp_enqueue_scriptsinc\class-eov.php:19
actioninitinc\free-plugin-list.php:7
actionadmin_menuinc\free-plugin-list.php:15
actioninitinc\PostType\OfficeViewer.php:9
filterpost_row_actionsinc\PostType\OfficeViewer.php:11
filtergettextinc\PostType\OfficeViewer.php:12
filterpost_updated_messagesinc\PostType\OfficeViewer.php:14
actionedit_form_after_titleinc\PostType\OfficeViewer.php:15
filteradmin_footer_textinc\PostType\OfficeViewer.php:16
filtermanage_officeviewer_posts_columnsinc\PostType\OfficeViewer.php:17
actionmanage_officeviewer_posts_custom_columninc\PostType\OfficeViewer.php:18
actionadd_meta_boxesinc\PostType\OfficeViewer.php:19
actionadmin_head-post.phpinc\PostType\OfficeViewer.php:21
actionadmin_head-post-new.phpinc\PostType\OfficeViewer.php:22
actionadmin_menuinc\PostType\OfficeViewer.php:26
Maintenance & Trust

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 15, 2026
PHP min version7.1
Downloads51K

Community Trust

Rating94/100
Number of ratings52
Active installs2K
Alternatives

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Alternatives

Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files

Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files

embed-any-document

A
95

Embed PDF, DOC, PPT and XLS documents easily on your WordPress website with the help of Google Docs Viewer or Microsoft Office Online.

50K 4 CVEs
PDF Rack – PDF Viewer, Document Manager & Embed PDF Files

PDF Rack – PDF Viewer, Document Manager & Embed PDF Files

pdf-rack

A
100

The all-in-one PDF manager for WordPress — upload, organize, and embed PDF documents with a beautiful responsive viewer. Works with Gutenberg, Element …

0 No CVEs
PDF Embedder

PDF Embedder

pdf-embedder

A
100

Seamlessly embed PDFs into your content, with customizations and intelligent responsive resizing, and no third-party services or iframes.

300K 1 CVE
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer

Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer

3d-flipbook-dflip-lite

A
95

Dear Flipbook creates PDF Flipbook, 3D Flipbook, PDF viewer, PDF embed for WordPress sites. Create impressive and realistic 3D flipbooks with PDFs.

100K 8 CVEs
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

interactive-3d-flipbook-powered-physics-engine

A
96

3D FlipBook is PDF Viewer, allowing to browse images, PDFs or HTMLs as flipbook. Flipbook attracts user attention and makes more impression on him.

80K 8 CVEs
Developer Profile

Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly Developer Profile

colorlibplugins

120 plugins · 738K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
140 days
View full developer profile
Detection Fingerprints

How We Detect Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/embed-office-viewer/assets/css/viewer.css/wp-content/plugins/embed-office-viewer/assets/js/pdfmake.min.js/wp-content/plugins/embed-office-viewer/assets/js/office-viewer.js
Script Paths
/wp-content/plugins/embed-office-viewer/assets/js/pdfmake.min.js/wp-content/plugins/embed-office-viewer/assets/js/office-viewer.js
Version Parameters
embed-office-viewer/assets/css/viewer.css?ver=embed-office-viewer/assets/js/pdfmake.min.js?ver=embed-office-viewer/assets/js/office-viewer.js?ver=

HTML / DOM Fingerprints

CSS Classes
eov-office-viewer
Data Attributes
data-eov-srcdata-eov-heightdata-eov-width
JS Globals
EOV_PLUGIN_DIREOV_PLUGIN_PATHEOV_VERSION
Shortcode Output
[office-viewer src="" height="" width="" ]
FAQ

Frequently Asked Questions about Document Viewer – Embed Word, Excel, PowerPoint & PDFs Instantly