EM
Product
EmbedPress
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 21Low 0
Watch
Add EmbedPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43328 | 9.8 | Aug 19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects… Affected: before 4.0.10 |
| CVE-2024-31284 | 9.8 | Jun 9 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8 Affected: before 3.9.9 |
| CVE-2024-38707 | 8.8 | Nov 1 | Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a… Affected: before 4.0.5 |
| CVE-2023-51375 | 8.8 | Jun 21 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3 Affected: before 3.8.4 |
| CVE-2026-48872 | 7.5 | Jun 15 | WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability Affected: through 4.5.2 |
| CVE-2023-3371 | 7.5 | Jun 27 | The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lock_content_form_handler' and 'display_password_form'… Affected: through 3.7.3 |
| CVE-2026-61961 | 7.1 | Aug 6 | WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability Affected: through 4.5.6 |
| CVE-2023-5750 | 6.1 | Dec 11 | The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the page containing a specific content, leading to a Reflected… Affected: before 3.9.2 |
| CVE-2023-5749 | 6.1 | Dec 11 | The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could… Affected: before 3.9.2 |
| CVE-2024-11203 | 5.4 | Nov 28 | The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin for WordPress is… Affected: before 4.1.4 |
| CVE-2024-50461 | 5.4 | Oct 28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This issue affects… Affected: before 4.1.0 |
| CVE-2024-43936 | 5.4 | Aug 29 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects… Affected: before 4.0.9 |
| CVE-2024-1565 | 5.4 | Jun 13 | The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored… Affected: before 3.9.11 |
| CVE-2024-5571 | 5.4 | Jun 5 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: before 4.0.2 |
| CVE-2024-4316 | 5.4 | May 14 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.16 |
| CVE-2024-3244 | 5.4 | Apr 9 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.14 |
| CVE-2024-3245 | 5.4 | Apr 6 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.14 |
| CVE-2024-2688 | 5.4 | Mar 23 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.12 |
| CVE-2024-2468 | 5.4 | Mar 23 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.12 |
| CVE-2024-1802 | 5.4 | Mar 7 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.10 |
| CVE-2024-2128 | 5.4 | Mar 7 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.10 |
| CVE-2024-1425 | 5.4 | Feb 29 | The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored… Affected: before 3.9.9 |
| CVE-2024-1349 | 5.4 | Feb 29 | The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored… Affected: before 3.9.9 |
| CVE-2023-6986 | 5.4 | Jan 3 | The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored… Affected: before 3.9.6 |
| CVE-2023-4283 | 5.4 | Aug 10 | The EmbedPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embedpress_calendar' shortcode in versions up to, and including, 3.8.2 due to… Affected: through 3.8.2 |
| CVE-2024-31274 | 5.3 | Jun 9 | Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11 Affected: before 3.9.12 |
| CVE-2024-1803 | 4.3 | May 23 | The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to… Affected: through 3.9.12 |
| CVE-2023-4282 | 4.3 | Aug 10 | The EmbedPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'admin_post_remove' and 'remove_private_data' functions in… Affected: through 3.8.2 |
Showing 28