CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

297 matches found

Positive Technologies•added 2026/06/06 12:00 a.m.•34 views

PT-2026-47133

Name of the Vulnerable Software and Affected Versions EmbedPress versions prior to 4.5.4 Description The EmbedPress plugin for WordPress is subject to Stored Cross-Site Scripting XSS, a flaw where malicious scripts are permanently stored on the target server. The issue occurs due to insufficient...

6.4CVSS5.7AI score0.00331EPSS

SaveExploits0References14

CNNVD•added 2026/06/06 12:00 a.m.•18 views

WordPress plugin EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Some...

6.4CVSS5.3AI score0.00331EPSS

SaveExploits0References12

Patchstack•added 2026/06/05 2:17 p.m.•16 views

WordPress EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more plugin <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by UKO - Korea univ. in WordPress Plugin EmbedPress versions = 4.5.3...

6.4CVSS5.4AI score0.00331EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/06/01 2:47 p.m.•16 views

WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mukhlis Amien in WordPress Plugin EmbedPress versions = 4.5.2...

7.5CVSS5.8AI score0.00346EPSS

SaveExploits0Affected Software1

Patchstack•added 2026/02/02 8:30 p.m.•14 views

WordPress EmbedPress plugin <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL vulnerability

AuthenticatedContributor+ Stored Cross-Site Scripting via PDF Widget URL vulnerability discovered by RandomRoot in WordPress Plugin EmbedPress versions = 3.9.10...

6.4CVSS5.2AI score0.00341EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/02/02 2:29 p.m.•14 views

WordPress EmbedPress plugin <= 3.9.12 - Authenticated (Contributor+) Stored Cross-site Scripting via 'embedpress_doc_custom_color' vulnerability

Authenticated Contributor+ Stored Cross-site Scripting via 'embedpressdoccustomcolor' vulnerability discovered by WordFence in WordPress Plugin EmbedPress versions = 3.9.12...

5.4CVSS5.3AI score0.0034EPSS

SaveExploits0References1Affected Software1

Patchstack•added 2026/02/02 12:54 p.m.•30 views

WordPress EmbedPress plugin <= 3.9.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Youtube Block vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Youtube Block vulnerability discovered by João Pedro Soares de Alcântara - Kinorth in WordPress Plugin EmbedPress versions = 3.9.14...

6.4CVSS5.3AI score0.0032EPSS

SaveExploits0References1Affected Software1

RedhatCVE•added 2026/01/07 9:14 a.m.•14 views

CVE-2024-2128

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's embed widget in all versions up to, and including, 3.9.10 due to insufficien...

6.4CVSS5.8AI score0.00405EPSS

SaveExploits0References1

RedhatCVE•added 2026/01/07 9:13 a.m.•17 views

CVE-2024-2468

The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the EmbedPress widget 'embedpressprotwitchtheme ' attribute in all versions up to, and...

6.4CVSS5.8AI score0.00343EPSS

SaveExploits0References1