EmbedPress vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

EM

Product

EmbedPress

by · last CVE Oct 14, 2026

7

CVEs

0

On KEV

6.8

Max CVSS

2

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 0Medium 5Low 2

Severity

All severities7 Critical0 High0 Medium5 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add EmbedPress to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-85001	6.8	0%	Sep 30	EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute Affected: 4.4.9 before 4.6.7
CVE-2026-85002	6.8	0%	Sep 27	EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes Affected: before 4.6.7
CVE-2026-10526	5.8	0%	Aug 4	EmbedPress < 4.6.1 - Unauthenticated Blind SSRF Affected: before 4.6.1
CVE-2026-85000	5.3	0%	Oct 14	EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating Affected: before 4.6.8
CVE-2026-84936	5.3	0%	Sep 5	EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat Affected: 4.6.0 before 4.6.4
CVE-2026-84927	2.7	0%	Sep 5	EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification Affected: 4.6.0 before 4.6.4
CVE-2026-84926	2.7	0%	Sep 5	EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route Affected: 4.6.0 before 4.6.4