CVE-2026-66590

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

CVE-2026-66590 WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

CVE-2026-66590 WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

CVE-2026-66590

Unauthenticated reflected XSS affects the Tagembed WordPress plugin (≤7.4), reachable over the network with no authentication. CVSS 7.1 (HIGH) reflects changed scope and low confidentiality/integrity/availability impact. A Patchstack advisory provides details; no exploitation evidence is reported...

EUVD-2026-63334

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

CVE-2026-66590: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

PT-2026-78955

Unauthenticated Cross Site Scripting XSS in Tagembed = 7.4 versions...

WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin Tagembed versions = 7.4...

EUVD-2024-35070

Malicious code in bioql PyPI...

EUVD-2024-30363

Malicious code in bioql PyPI...

CVE-2024-34804

Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8...

CVE-2024-32561

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tagembed allows Stored XSS.This issue affects Tagembed: from n/a through 4.7...

CVE-2024-34804

Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8...

CVE-2024-34804 WordPress Tagembed plugin <= 5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8...

CVE-2024-34804 WordPress Tagembed plugin <= 5.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8...

CVE-2024-34804

CVE-2024-34804 is a Missing Authorization vulnerability in the WordPress Tagembed plugin, affecting Tagembed versions from n/a through 5.8. The issue is described as Broken Access Control/Missing Authorization. Public details provided here indicate the vulnerability affects Tagembed and that ther...

CVE-2024-34804: Missing Authorization

Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8...

WordPress plugin Tagembed security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-26200 · Tagembed · Tagembed

Name of the Vulnerable Software and Affected Versions: Tagembed versions n/a through 5.8 Description: The issue is related to a Missing Authorization vulnerability in Tagembed. Recommendations: For versions n/a through 5.8, update to a version that contains a fix for this issue, however at the...

Tagembed <= 5.8 - Missing Authorization

Description The Tagembed plugin for WordPress is vulnerable to unauthorized access of functionality in versions up to, and including, 5.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to invoke such functionality. The security impact is low...