Advisories · Technology
EmbedPress.
Every CVE that names EmbedPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating
- EmbedPress
- Broken access control
- CVSS 6.8 Medium
EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute
- EmbedPress
- Cross-site scripting (XSS)
- CVSS 6.8 Medium
EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes
- EmbedPress
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat
- EmbedPress
- Broken access control
- CVSS 2.7 Low
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification
- EmbedPress
- Broken access control
- CVSS 2.7 Low
EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route
- EmbedPress
- Information disclosure
- CVSS 5.8 Medium
EmbedPress < 4.6.1 - Unauthenticated Blind SSRF
- EmbedPress
- Server-side request forgery (SSRF)
-
EmbedPress < 3.9.2 - Reflected XSS
- EmbedPress
-
EmbedPress < 3.9.2 - Reflected XSS
- EmbedPress