Embedpress (Wpdeveloper) - vulnerabilities (CVEs)

26 CVEs, 0 in the last 30 days, 188 known versions, newest CVE from 2026-08-06. Vendor: Wpdeveloper.

CVEs of Embedpress

• CVE-2026-61961 - CVSS 7.1 (high), 2026-08-06: Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
• CVE-2026-48872 - CVSS 7.5 (high), 2026-06-15: Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions.
• CVE-2024-11203 - CVSS 6.4 (medium), 2024-11-28: The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin…
• CVE-2024-38707 - CVSS 8.8 (high), 2024-11-01: Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
• CVE-2024-50461 - CVSS 6.5 (medium), 2024-10-28: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This…
• CVE-2024-43936 - CVSS 6.5 (medium), 2024-08-29: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This…
• CVE-2024-43328 - CVSS 9.8 (critical), 2024-08-19: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This…
• CVE-2023-51375 - CVSS 8.8 (high), 2024-06-21: Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3.
• CVE-2024-1565 - CVSS 6.4 (medium), 2024-06-13: The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is…
• CVE-2024-31284 - CVSS 9.8 (critical), 2024-06-09: Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8.
• CVE-2024-31274 - CVSS 5.3 (medium), 2024-06-09: Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.
• CVE-2024-5571 - CVSS 6.4 (medium), 2024-06-05: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-1803 - CVSS 4.3 (medium), 2024-05-23: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-4316 - CVSS 6.4 (medium), 2024-05-14: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-3244 - CVSS 6.4 (medium), 2024-04-09: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-3245 - CVSS 6.4 (medium), 2024-04-06: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-2688 - CVSS 5.4 (medium), 2024-03-23: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-2468 - CVSS 6.4 (medium), 2024-03-23: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-1802 - CVSS 6.4 (medium), 2024-03-07: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-2128 - CVSS 6.4 (medium), 2024-03-07: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress…
• CVE-2024-1425 - CVSS 6.4 (medium), 2024-02-29: The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is…
• CVE-2024-1349 - CVSS 6.4 (medium), 2024-02-29: The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is…
• CVE-2023-6986 - CVSS 6.4 (medium), 2024-01-03: The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is…
• CVE-2023-5750 - CVSS 6.1 (medium), 2023-12-11: The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the page containing a specific content,…
• CVE-2023-5749 - CVSS 6.1 (medium), 2023-12-11: The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a Reflected Cross-Site…
• CVE-2023-4282 - CVSS 5.4 (medium), 2023-08-10: The EmbedPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'admin_post_remove' and…
• CVE-2023-4283 - CVSS 6.4 (medium), 2023-08-10: The EmbedPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embedpress_calendar' shortcode in versions up to, and including,…
• CVE-2023-3371 - CVSS 7.5 (high), 2023-06-27: The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lock_content_form_handler' and…