PDF Embed Block – Embed PDF Files in Posts or Pages Security & Risk Analysis

wordpress.org/plugins/pdf-embed-block

Easily embed PDF files in your WordPress posts and pages with the PDF Embed Block plugin.

3K active installs v1.2.2 PHP 7.1+ WP 6.5+ Updated Mar 15, 2026
blockdisplay-pdfembed-pdfgutenberg-blockpdf
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is PDF Embed Block – Embed PDF Files in Posts or Pages Safe to Use in 2026?

Generally Safe

Score 100/100

PDF Embed Block – Embed PDF Files in Posts or Pages has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 19d ago
Risk Assessment

The pdf-embed-block plugin v1.2.2 exhibits a strong security posture based on the provided static analysis and vulnerability history. The plugin demonstrates good security practices by implementing nonce checks and capability checks for its AJAX handlers, and all SQL queries are secured using prepared statements. Furthermore, all output appears to be properly escaped, and there are no observed file operations or external HTTP requests, significantly reducing the potential attack surface. The absence of any recorded vulnerabilities (CVEs) in its history is a very positive indicator of consistent security development.

Key Concerns

  • Bundled library (Freemius) may require updates
Vulnerabilities
None known

PDF Embed Block – Embed PDF Files in Posts or Pages Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

PDF Embed Block – Embed PDF Files in Posts or Pages Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
8 escaped
Nonce Checks
2
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
2

Bundled Libraries

jQueryFreemius

Output Escaping

100% escaped8 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
pebGetBlocks_callback (includes\rootPlugin\inc\RestAPI.php:38)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

PDF Embed Block – Embed PDF Files in Posts or Pages Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 3

authwp_ajax_pebPremiumCheckerincludes\rootPlugin\inc\RestAPI.php:7
noprivwp_ajax_pebPremiumCheckerincludes\rootPlugin\inc\RestAPI.php:8
authwp_ajax_pebGetBlocksincludes\rootPlugin\inc\RestAPI.php:11

Shortcodes 1

[pdf_embed] includes\rootPlugin\inc\ShortCode.php:6
WordPress Hooks 10
actionadmin_menuincludes\rootPlugin\inc\AdminMenu.php:7
filtermanage_pdf_embed_posts_columnsincludes\rootPlugin\inc\CustomColumn.php:7
actionmanage_pdf_embed_posts_custom_columnincludes\rootPlugin\inc\CustomColumn.php:8
actionenqueue_block_assetsincludes\rootPlugin\inc\Enqueue.php:7
actionscript_loader_tagincludes\rootPlugin\inc\Enqueue.php:8
actionadmin_enqueue_scriptsincludes\rootPlugin\inc\Enqueue.php:9
actioninitincludes\rootPlugin\inc\Init.php:7
actionadmin_initincludes\rootPlugin\inc\RestAPI.php:9
actionrest_api_initincludes\rootPlugin\inc\RestAPI.php:10
actionload-plugin-editor.phpincludes\utility\functions.php:13
Maintenance & Trust

PDF Embed Block – Embed PDF Files in Posts or Pages Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 15, 2026
PHP min version7.1
Downloads28K

Community Trust

Rating100/100
Number of ratings1
Active installs3K
Developer Profile

PDF Embed Block – Embed PDF Files in Posts or Pages Developer Profile

colorlibplugins

120 plugins · 738K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
140 days
View full developer profile
Detection Fingerprints

How We Detect PDF Embed Block – Embed PDF Files in Posts or Pages

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pdf-embed-block/public/dflip/js/dflip.min.js/wp-content/plugins/pdf-embed-block/public/dflip/css/dflip.min.css/wp-content/plugins/pdf-embed-block/build/admin-post.js/wp-content/plugins/pdf-embed-block/build/admin-post.css/wp-content/plugins/pdf-embed-block/build/admin-dashboard.js/wp-content/plugins/pdf-embed-block/build/admin-dashboard.css
Script Paths
https://documentcloud.adobe.com/view-sdk/viewer.js
Version Parameters
pdf-embed-block/public/dflip/js/dflip.min.js?ver=pdf-embed-block/public/dflip/css/dflip.min.css?ver=pdf-embed-block/build/admin-post.js?ver=pdf-embed-block/build/admin-post.css?ver=pdf-embed-block/build/admin-dashboard.js?ver=pdf-embed-block/build/admin-dashboard.css?ver=pdf-embed-block/vendor/freemius/start.php?ver=pdf-embed-block/vendor/freemius-lite/start.php?ver=

HTML / DOM Fingerprints

CSS Classes
dflip-pdf
Data Attributes
data-id
JS Globals
PEB_PLUGIN_VERSIONPEB_DIR_URLPEB_DIR_PATHPEB_HAS_FRMSpeb_fspebConfig+1 more
Shortcode Output
[pdf_embed id=
FAQ

Frequently Asked Questions about PDF Embed Block – Embed PDF Files in Posts or Pages