WordPress Plugin Vulnerabilities | Page 44 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-02-14

Title

EmbedPress < 3.9.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link

Slug

Published

2024-02-14

Title

EmbedPress < 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Slug

Published

2024-03-07

Title

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 3.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget

Slug

Published

2024-03-07

Title

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 3.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Wistia Block

Slug

Published

2024-03-22

Title

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 3.9.13 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color'

Slug

Published

2024-03-22

Title

EmbedPress < 3.9.13 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute

Slug

Published

2024-04-05

Title

EmbedPress < 3.9.12 - Missing Authorization

Slug

Published

2024-04-05

Title

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 3.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Slug

Published

2024-04-05

Title

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 3.9.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block

Slug

Published

2024-04-05

Title

EmbedPress < 3.9.9 - Missing Authorization via handle_calendly_data

Slug

Published

2024-05-09

Title

EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 3.9.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Slug

Published

2024-05-22

Title

EmbedPress < 3.9.13 - Contributor+ PDF Block Embedding

Slug

Published

2024-06-04

Title

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor < 4.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget

Slug

Published

2024-06-12

Title

EmbedPress < 3.9.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL

Slug

Published

2024-07-11

Title

EmbedPress < 4.0.5 - Missing Authorization

Slug

Published

2024-08-16

Title

EmbedPress < 4.0.10 - Unauthenticated Local File Inclusion

Slug

Published

2024-08-26

Title

EmbedPress < 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-10-24

Title

EmbedPress < 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2024-11-27

Title

EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor < 4.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'

Slug

Published

2026-06-05

Title

EmbedPress < 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute

Slug

Published

2026-06-01

Title

EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more < 4.5.3 - Unauthenticated Information Exposure

Slug

Published

2023-01-30

Title

EmbedStories < 0.7.5 - Contributor+ Stored XSS

Slug

emc2-alert-boxes

Published

2025-01-03

Title

EMC2 Alert Boxes <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2026-01-28

Title

Emerce Core <= 1.8 - Unauthenticated SQL Injection

Slug

emergency-password-reset

Published

2024-06-03

Title

Emergency Password Reset < 9.0 - Cross-Site Request Forgery