Unknown Embedpress vulnerabilities

• unknown embedpress EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating CVE-2026-85000 5.3 MediumOctober 14, 2026
• unknown embedpress EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute CVE-2026-85001 6.8 MediumSeptember 30, 2026
• unknown embedpress EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes CVE-2026-85002 6.8 MediumSeptember 27, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat CVE-2026-84936 5.3 MediumSeptember 5, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification CVE-2026-84927 2.7 LowSeptember 5, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route CVE-2026-84926 2.7 LowSeptember 5, 2026
• unknown embedpress EmbedPress < 4.6.1 - Unauthenticated Blind SSRF CVE-2026-10526 5.8 MediumAugust 4, 2026
• unknown embedpress EmbedPress < 3.9.2 - Reflected XSS CVE-2023-5749 6.1 MediumDecember 11, 2023
• unknown embedpress EmbedPress < 3.9.2 - Reflected XSS CVE-2023-5750 6.1 MediumDecember 11, 2023