Wpdeveloper Embedpress vulnerabilities

• unknown embedpress EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating CVE-2026-85000 5.3 MediumOctober 14, 2026
• unknown embedpress EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute CVE-2026-85001 6.8 MediumSeptember 30, 2026
• unknown embedpress EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes CVE-2026-85002 6.8 MediumSeptember 27, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat CVE-2026-84936 5.3 MediumSeptember 5, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification CVE-2026-84927 2.7 LowSeptember 5, 2026
• unknown embedpress EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route CVE-2026-84926 2.7 LowSeptember 5, 2026
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-61961 7.1 HighAugust 6, 2026
• unknown embedpress EmbedPress < 4.6.1 - Unauthenticated Blind SSRF CVE-2026-10526 5.8 MediumAugust 4, 2026
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability CVE-2026-48872 7.5 HighJune 15, 2026
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor <= 4.1.3 - Authenticated (Contributor+) Stored Cross-S… CVE-2024-11203 6.4 MediumNovember 28, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability CVE-2024-38707 6.3 MediumNovember 1, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability CVE-2024-50461 6.5 MediumOctober 28, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-43936 6.5 MediumAugust 29, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability CVE-2024-43328 8.3 HighAugust 19, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability CVE-2023-51375 4.3 MediumJune 21, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL CVE-2024-1565 6.4 MediumJune 13, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability CVE-2024-31284 6.5 MediumJune 9, 2024
• wpdeveloper embedpress WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability CVE-2024-31274 5.3 MediumJune 9, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripti… CVE-2024-5571 6.4 MediumJune 5, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Insufficient Authorization Checks to Block Usual CVE-2024-1803 4.3 MediumMay 23, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (Contributor+) Stored Cross-Site Scripting… CVE-2024-4316 6.4 MediumMay 9, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripti… CVE-2024-3244 6.4 MediumApril 9, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripti… CVE-2024-3245 6.4 MediumApril 6, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute CVE-2024-2468 6.4 MediumMarch 23, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripti… CVE-2024-2688 5.4 MediumMarch 23, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripti… CVE-2024-1802 6.4 MediumMarch 7, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripti… CVE-2024-2128 6.4 MediumMarch 7, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-1349 6.4 MediumFebruary 20, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link CVE-2024-1425 6.4 MediumFebruary 20, 2024
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortc… CVE-2023-6986 6.4 MediumJanuary 3, 2024
• unknown embedpress EmbedPress < 3.9.2 - Reflected XSS CVE-2023-5749 6.1 MediumDecember 11, 2023
• unknown embedpress EmbedPress < 3.9.2 - Reflected XSS CVE-2023-5750 6.1 MediumDecember 11, 2023
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4283 6.4 MediumAugust 10, 2023
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data CVE-2023-4282 5.4 MediumAugust 10, 2023
• wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 more EmbedPress <= 3.7.3 - Sensitive Information Exposure CVE-2023-3371 5.3 MediumJune 27, 2023