Product by WPDeveloper

    EmbedPress

    28 known vulnerabilities in EmbedPress (WPDeveloper), 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in EmbedPress (WPDeveloper)
    HighCVE-2026-48872

    WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability

    		7.5
    CriticalCVE-2024-43328

    WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability

    		8.3
    HighCVE-2026-61961

    WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2024-1425

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-3244

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-4283

    EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    HighCVE-2024-38707

    WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

    		6.3
    MediumCVE-2024-1349

    EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    also in 1 other product

    		6.4
    MediumCVE-2023-5750

    EmbedPress < 3.9.2 - Reflected XSS

    		6.1
    CriticalCVE-2024-31284

    WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2023-5749

    EmbedPress < 3.9.2 - Reflected XSS

    		6.1
    MediumCVE-2023-6986

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-11203

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2128

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2023-3371

    EmbedPress <= 3.7.3 - Sensitive Information Exposure

    also in 1 other product

    		5.3
    MediumCVE-2023-4282

    WPDeveloper EmbedPress: Missing Authorization

    also in 1 other product

    		5.4
    MediumCVE-2024-1565

    EmbedPress <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF Widget URL

    also in 1 other product

    		6.4
    MediumCVE-2024-4316

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2468

    EmbedPress <= 3.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Attribute

    also in 1 other product

    		6.4
    MediumCVE-2024-43936

    WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-5571

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-3245

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-50461

    WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2024-1802

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-2688

    WPDeveloper EmbedPress: Cross-site Scripting

    also in 1 other product

    		5.4

    All vulnerabilities in search

    All products by WPDeveloper