WP-Safety

Document Viewer – Embed and Display Office and PDF Files Security & Risk Analysis

wordpress.org/plugins/embed-office-viewer

With the Document Viewer for Office plugin, you can view Microsoft Word, Excel, PowerPoint, and more files in WordPress using shortcode

2K active installs v2.4.1 PHP 7.4+ WP 6.2+ Updated Jun 28, 2026
document-viewereasy-document-embedderembed-documentpdf-embedder
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Document Viewer – Embed and Display Office and PDF Files Safe to Use in 2026?

Generally Safe

Score 100/100

Document Viewer – Embed and Display Office and PDF Files has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The 'embed-office-viewer' plugin v2.3.3 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any known CVEs, including critical or high-severity ones, and the fact that there are no currently unpatched vulnerabilities is a very positive indicator. Furthermore, the code analysis reveals excellent practices such as 100% of SQL queries using prepared statements and a significant percentage (70%) of outputs being properly escaped, along with a robust number of nonce and capability checks. The limited attack surface with all identified entry points having associated authentication checks is also commendable.

Key Concerns

  • Outputs are not fully escaped (70% proper)
  • Bundled library (Freemius v1.0) is present
Vulnerabilities
None known

Document Viewer – Embed and Display Office and PDF Files Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Document Viewer – Embed and Display Office and PDF Files Release Timeline

v2.4.1Current
v2.4.0
v2.3.3
v2.3.2
v2.3.1
v2.3.0
v2.2.10
v2.2.9
v2.2.8
v2.2.6
v2.2.4
v2.0.1
v1.1
v1.0.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

Document Viewer – Embed and Display Office and PDF Files Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
232
547 escaped
Nonce Checks
13
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared2 total queries

Output Escaping

70% escaped779 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

3 flows
csf_export (frameworks\codestar-framework\functions\actions.php:62)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Document Viewer – Embed and Display Office and PDF Files Attack Surface

Entry Points8
Unprotected0

AJAX Handlers 7

authwp_ajax_eovPipeCheckerblock.php:10
noprivwp_ajax_eovPipeCheckerblock.php:11
authwp_ajax_csf-get-iconsframeworks\codestar-framework\functions\actions.php:50
authwp_ajax_csf-exportframeworks\codestar-framework\functions\actions.php:87
authwp_ajax_csf-importframeworks\codestar-framework\functions\actions.php:123
authwp_ajax_csf-resetframeworks\codestar-framework\functions\actions.php:150
authwp_ajax_csf-chosenframeworks\codestar-framework\functions\actions.php:189

Shortcodes 1

[office_doc] inc\Services\Shortcode.php:9
WordPress Hooks 67
actioninitblock.php:7
actionenqueue_block_assetsblock.php:8
actionadmin_initblock.php:12
actionrest_api_initblock.php:13
actionwp_enqueue_scriptsframeworks\codestar-framework\classes\abstract.class.php:20
actionadmin_menuframeworks\codestar-framework\classes\admin-options.class.php:107
actionadmin_bar_menuframeworks\codestar-framework\classes\admin-options.class.php:108
actionnetwork_admin_menuframeworks\codestar-framework\classes\admin-options.class.php:112
filteradmin_footer_textframeworks\codestar-framework\classes\admin-options.class.php:493
actionadd_meta_boxes_commentframeworks\codestar-framework\classes\comment-options.class.php:38
actionedit_commentframeworks\codestar-framework\classes\comment-options.class.php:39
actioncustomize_registerframeworks\codestar-framework\classes\customize-options.class.php:43
actioncustomize_save_afterframeworks\codestar-framework\classes\customize-options.class.php:44
actionwp_enqueue_scriptsframeworks\codestar-framework\classes\customize-options.class.php:48
actionadd_meta_boxesframeworks\codestar-framework\classes\metabox-options.class.php:52
actionsave_postframeworks\codestar-framework\classes\metabox-options.class.php:53
actionedit_attachmentframeworks\codestar-framework\classes\metabox-options.class.php:54
actionwp_nav_menu_item_custom_fieldsframeworks\codestar-framework\classes\nav-menu-options.class.php:30
actionwp_update_nav_menu_itemframeworks\codestar-framework\classes\nav-menu-options.class.php:31
filterwp_edit_nav_menu_walkerframeworks\codestar-framework\classes\nav-menu-options.class.php:33
actionadmin_initframeworks\codestar-framework\classes\profile-options.class.php:30
actionshow_user_profileframeworks\codestar-framework\classes\profile-options.class.php:42
actionedit_user_profileframeworks\codestar-framework\classes\profile-options.class.php:43
actionpersonal_options_updateframeworks\codestar-framework\classes\profile-options.class.php:45
actionedit_user_profile_updateframeworks\codestar-framework\classes\profile-options.class.php:46
actionafter_setup_themeframeworks\codestar-framework\classes\setup.class.php:73
actioninitframeworks\codestar-framework\classes\setup.class.php:74
actionswitch_themeframeworks\codestar-framework\classes\setup.class.php:75
actionadmin_enqueue_scriptsframeworks\codestar-framework\classes\setup.class.php:76
actionwp_enqueue_scriptsframeworks\codestar-framework\classes\setup.class.php:77
actionwp_headframeworks\codestar-framework\classes\setup.class.php:78
filteradmin_body_classframeworks\codestar-framework\classes\setup.class.php:79
actionadmin_footerframeworks\codestar-framework\classes\shortcode-options.class.php:47
actioncustomize_controls_print_footer_scriptsframeworks\codestar-framework\classes\shortcode-options.class.php:48
actionelementor/editor/before_enqueue_scriptsframeworks\codestar-framework\classes\shortcode-options.class.php:59
actionelementor/editor/footerframeworks\codestar-framework\classes\shortcode-options.class.php:60
actionelementor/editor/footerframeworks\codestar-framework\classes\shortcode-options.class.php:61
actionenqueue_block_editor_assetsframeworks\codestar-framework\classes\shortcode-options.class.php:303
actionmedia_buttonsframeworks\codestar-framework\classes\shortcode-options.class.php:307
actionadmin_initframeworks\codestar-framework\classes\taxonomy-options.class.php:41
actionadmin_footerframeworks\codestar-framework\fields\icon\icon.php:41
actioncustomize_controls_print_footer_scriptsframeworks\codestar-framework\fields\icon\icon.php:42
actionadmin_print_footer_scriptsframeworks\codestar-framework\fields\link\link.php:65
actionprint_default_editor_scriptsframeworks\codestar-framework\fields\wp_editor\wp_editor.php:62
actionadmin_footerframeworks\codestar-framework\metabox-free.php:10
actionadmin_menuframeworks\codestar-framework\views\welcome.php:19
filterplugin_action_linksframeworks\codestar-framework\views\welcome.php:20
filterplugin_row_metaframeworks\codestar-framework\views\welcome.php:21
actioninitinc\class-eov.php:15
actionplugins_loadedinc\class-eov.php:16
actionplugins_loadedinc\class-eov.php:17
actionadmin_enqueue_scriptsinc\class-eov.php:18
actionwp_enqueue_scriptsinc\class-eov.php:19
actioninitinc\free-plugin-list.php:7
actionadmin_menuinc\free-plugin-list.php:15
actioninitinc\PostType\OfficeViewer.php:9
filterpost_row_actionsinc\PostType\OfficeViewer.php:11
filtergettextinc\PostType\OfficeViewer.php:12
filterpost_updated_messagesinc\PostType\OfficeViewer.php:14
actionedit_form_after_titleinc\PostType\OfficeViewer.php:15
filteradmin_footer_textinc\PostType\OfficeViewer.php:16
filtermanage_officeviewer_posts_columnsinc\PostType\OfficeViewer.php:17
actionmanage_officeviewer_posts_custom_columninc\PostType\OfficeViewer.php:18
actionadd_meta_boxesinc\PostType\OfficeViewer.php:19
actionadmin_head-post.phpinc\PostType\OfficeViewer.php:21
actionadmin_head-post-new.phpinc\PostType\OfficeViewer.php:22
actionadmin_menuinc\PostType\OfficeViewer.php:26
Maintenance & Trust

Document Viewer – Embed and Display Office and PDF Files Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJun 28, 2026
PHP min version7.4
Downloads55K

Community Trust

Rating94/100
Number of ratings52
Active installs2K
Alternatives

Document Viewer – Embed and Display Office and PDF Files Alternatives

Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files

Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files

embed-any-document

A
96

Embed PDF, DOC, PPT and XLS documents easily on your WordPress website with the help of Google Docs Viewer or Microsoft Office Online.

50K 4 CVEs
PDF Poster – Display PDF Files with Custom Viewer

PDF Poster – Display PDF Files with Custom Viewer

pdf-poster

A
96

PDF Poster lets you embed PDF files in WordPress using a responsive viewer and block support, including full-screen, download, and print options.

20K 3 CVEs
Pdf Embed

Pdf Embed

pdf-embed

A
100

PDF embedder with official Adobe Embed API.

10K No CVEs
Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder

Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder

real3d-flipbook-lite

A
94

Embed PDF files easily anywhere on your website. Display your PDFs and images as stunning, interactive 3D flipbooks directly within WordPress.

10K 5 CVEs
Document Embedder – Embed PDFs, Word, Excel, and Other Files

Document Embedder – Embed PDFs, Word, Excel, and Other Files

document-emberdder

A
95

Document Embedder lets you display PDF, DOCX, PPTX, XLSX, and other files in WordPress sites with a responsive viewer and optional download button.

9K 4 CVEs
Developer Profile

Document Viewer – Embed and Display Office and PDF Files Developer Profile

colorlibplugins

124 plugins · 730K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
124 days
View full developer profile
Detection Fingerprints

How We Detect Document Viewer – Embed and Display Office and PDF Files

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/embed-office-viewer/assets/css/viewer.css/wp-content/plugins/embed-office-viewer/assets/js/pdfmake.min.js/wp-content/plugins/embed-office-viewer/assets/js/office-viewer.js
Script Paths
/wp-content/plugins/embed-office-viewer/assets/js/pdfmake.min.js/wp-content/plugins/embed-office-viewer/assets/js/office-viewer.js
Version Parameters
embed-office-viewer/assets/css/viewer.css?ver=embed-office-viewer/assets/js/pdfmake.min.js?ver=embed-office-viewer/assets/js/office-viewer.js?ver=

HTML / DOM Fingerprints

CSS Classes
eov-office-viewer
Data Attributes
data-eov-srcdata-eov-heightdata-eov-width
JS Globals
EOV_PLUGIN_DIREOV_PLUGIN_PATHEOV_VERSION
Shortcode Output
[office-viewer src="" height="" width="" ]
FAQ

Frequently Asked Questions about Document Viewer – Embed and Display Office and PDF Files