Known vulnerabilities in the Embedpress plugin

22 security advisories have been published for the Embedpress plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

EmbedPress - Cross-Site Scripting (XSS) (CVE-2026-61961) HIGH 2026-08-06
Embedpress - Server-Side Request Forgery (SSRF) (CVE-2026-10526) MEDIUM 2026-08-04
Embedpress - Cross-Site Scripting (XSS) (CVE-2026-7796) MEDIUM 2026-06-06
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-11203) MEDIUM 2024-11-28
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-1565) MEDIUM 2024-06-13
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-5571) MEDIUM 2024-06-05
Embedpress - Security Vulnerability (CVE-2024-1803) MEDIUM 2024-05-23
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-4316) MEDIUM 2024-05-14
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-3244) MEDIUM 2024-04-09
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-3245) MEDIUM 2024-04-06
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-2688) MEDIUM 2024-03-23
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-2468) MEDIUM 2024-03-23
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-1802) MEDIUM 2024-03-07
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-2128) MEDIUM 2024-03-07
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-1425) MEDIUM 2024-02-29
Embedpress - Cross-Site Scripting (XSS) (CVE-2024-1349) MEDIUM 2024-02-29
Embedpress - Cross-Site Scripting (XSS) (CVE-2023-6986) MEDIUM 2024-01-03
Embedpress - Cross-Site Scripting (XSS) (CVE-2023-5750) MEDIUM 2023-12-11
Embedpress - Cross-Site Scripting (XSS) (CVE-2023-5749) MEDIUM 2023-12-11
Embedpress - Cross-Site Scripting (XSS) (CVE-2023-4283) MEDIUM 2023-08-10
Embedpress - Broken Access Control (CVE-2023-4282) MEDIUM 2023-08-10
Embedpress - Information Disclosure (CVE-2023-3371) MEDIUM 2023-06-27

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.