CVE-2026-48093: Improper Neutralization of Input During Web Page Generation

The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripting XSS through the external URL embed feature in post content. The vulnerable code scans rendered content for URL embed tokens, fetches the remote URL, and inserts the remote response body into the pa...

Artiss Code Embed 2.0.1 - wp-admin/admin.php suffix Parameter XSS

The Code Embed WordPress plugin was affected by a wp-admin/admin.php suffix Parameter XSS security vulnerability...