WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
embedpress
Published
2024-08-16
Title
EmbedPress < 4.0.10 - Unauthenticated Local File Inclusion
Slug
embedpress
Published
2024-08-26
Title
EmbedPress < 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
embedpress
Published
2024-10-24
Title
EmbedPress < 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
embedpress
Published
2024-11-27
Title
EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor < 4.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'provider_name'
Slug
embedpress
Published
2026-06-05
Title
EmbedPress < 4.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute
Slug
embedpress
Published
2026-06-01
Title
EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more < 4.5.3 - Unauthenticated Information Exposure
Slug
embedpress
Published
2026-07-27
Title
EmbedPress < 4.6.1 - Unauthenticated Blind SSRF
Slug
embedpress
Published
2026-08-03
Title
EmbedPress < 4.6.0 - Unauthenticated Stored XSS
Slug
embedpress
Published
2026-09-03
Title
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route
Slug
embedpress
Published
2026-09-03
Title
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification
Slug
embedpress
Published
2026-09-03
Title
EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat
Slug
embedpress
Published
2026-09-17
Title
EmbedPress < 4.6.6 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters
Slug
embedpress
Published
2026-09-25
Title
EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes
Slug
embedpress
Published
2026-09-28
Title
EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute
Slug
embedpress
Published
2026-10-02
Title
EmbedPress < 4.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute
Slug
embedpress
Published
2026-10-12
Title
EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating
Slug
embedstories
Published
2023-01-30
Title
EmbedStories < 0.7.5 - Contributor+ Stored XSS
Slug
emc2-alert-boxes
Published
2025-01-03
Title
EMC2 Alert Boxes <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
emerce-core
Published
2026-01-28
Title
Emerce Core <= 1.8 - Unauthenticated SQL Injection
Slug
emergency-password-reset
Published
2024-06-03
Title
Emergency Password Reset < 9.0 - Cross-Site Request Forgery
Slug
emergency-password-reset
Published
2025-09-22
Title
Emergency Password Reset < 9.4 - Cross-Site Request Forgery
Slug
emergencywp
Published
2026-06-02
Title
EmergencyWP <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
emi-calculator
Published
2025-01-18
Title
EMI Calculator <= 1.1 - Missing Authorization to Unauthenticated Settings Change
Slug
emma-emarketing-plugin
Published
2025-04-04
Title
Emma for WordPress <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
emoji-shortcode
Published
2024-10-31
Title
Emoji Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting