Plugin icon

iframe

iframe

Vulnerabilities:

7

Last Updated:

May 17, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2024-05-22
Title
iframe < 5.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Fixed in
Fixed in 5.1
CVSS
5 (medium)
Published
2024-05-14
Title
iframe < 5.1 - Contributor+ Stored XSS
Fixed in
Fixed in 5.1
CVSS
5.9 (medium)
Published
2023-12-28
Title
iFrame < 4.9 - Contributor+ Stored XSS
Fixed in
Fixed in 4.9
CVSS
3.4 (low)
Published
2023-09-25
Title
iframe < 4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode
Fixed in
Fixed in 4.7
CVSS
6.4 (medium)
Published
2020-05-07
Title
Iframe < 4.5 - Authenticated Stored Cross Site Scripting (XSS)
Fixed in
Fixed in 4.5
CVSS
4.8 (medium)
Published
2015-08-11
Title
iframe < 4.0 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.0
CVSS
n/a
Published
2015-08-11
Title
iframe < 4.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.0
CVSS
n/a