Where
-Infinity
0

Trending

Last week
Last month
Last year

WPDeveloper EmbedPressWordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2024-38707

WPDeveloper Embedpress WordpressWordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
First published (updated )
CVE-2024-50461

WPDeveloper Embedpress WordpressWordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2024-43936

WPDeveloper EmbedPressWordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2024-43328

WPDeveloper Embedpress WordpressWordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2023-51375
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WPDeveloper Embedpress WordpressEmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1565

WPDeveloper Embedpress WordpressWordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2024-31284

WPDeveloper Embedpress WordpressWordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-31274

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-5571

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Insufficient Authorization Checks to Block Usual

Risk 22
Severity
4.3
First published (updated )
CVE-2024-1803
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WPDeveloper Embedpress WordpressEmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-4316

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-3244

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2024-3245

WPDeveloper Embedpress WordpressEmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2468

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color'

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-2688
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Wistia Block

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1802

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via EmbedPress PDF Widget

Risk 39
Severity
6.4
First published (updated )
CVE-2024-2128

WPDeveloper Embedpress WordpressEmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1349

WPDeveloper Embedpress WordpressEmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link

Risk 39
Severity
6.4
First published (updated )
CVE-2024-1425

WPDeveloper Embedpress WordpressEmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2023-6986
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

WPDeveloper Embedpress WordpressEmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2023-4283

WPDeveloper Embedpress WordpressEmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data

Risk 34
Severity
5.4
First published (updated )
CVE-2023-4282

WPDeveloper Embedpress WordpressEmbedPress <= 3.7.3 - Sensitive Information Exposure

Risk 43
Severity
7.5
First published (updated )
CVE-2023-3371

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203