CVE-2026-85001

The EmbedPress WordPress plugin (versions before 4.6.7 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is a failure to sanitize and escape one of its Elementor widget settings (specifically the showTitle attribute) before it is output into an HTML attribute. This allow...