Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 3 days ago6 views

CVE-2026-6809

The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on the user-supplied URL. This makes it possible for authenticated...

6.4CVSS5.7AI score0.00046EPSS
Exploits0References1
NVD
NVD
added 2026/04/28 6:16 a.m.2 views

CVE-2026-6809

The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on the user-supplied URL. This makes it possible for authenticated...

6.4CVSS0.00046EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/28 4:28 a.m.4 views

EUVD-2026-25987

The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on the user-supplied URL. This makes it possible for authenticated...

6.4CVSS5.5AI score0.00046EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/04/28 4:28 a.m.3 views

CVE-2026-6809 Social Post Embed <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Threads Embed

The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on the user-supplied URL. This makes it possible for authenticated...

6.4CVSS5.5AI score0.00046EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/28 4:28 a.m.3 views

CVE-2026-6809

The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1. This is due to insufficient input sanitization and output escaping on the user-supplied URL. This makes it possible for authenticated...

6.4CVSS5.5AI score0.00046EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.2 views

PT-2023-10299 · WordPress · Beeliked Microsite Plugin

Name of the Vulnerable Software and Affected Versions: Beeliked Microsite Plugin versions up to 1.0.1 Description: A vulnerability has been found in the Beeliked Microsite Plugin, which is classified as problematic. The issue affects the embed handler function of the file beelikedmicrosite.php,...

6.1CVSS6.8AI score0.00073EPSS
Exploits0References5
Rows per page
Query Builder