Code Embed (Dartiss) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-03-18. Vendor: Dartiss.

CVEs of Code Embed

• CVE-2026-2512 - CVSS 6.4 (medium), 2026-03-18: The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all versions up to, and including, 2.5.1.…
• CVE-2024-10814 - CVSS 6.4 (medium), 2024-11-09: The Code Embed plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5 via the ce_get_file() function.…
• CVE-2024-8804 - CVSS 6.4 (medium), 2024-10-04: The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functionality in all versions up to, and…