WordPress Code Embed Plugin <= 2.5 is vulnerable to Server Side Request Forgery (SSRF)

Software Code Embed Type Plugin Vulnerable versions = 2.5 Fixed in 2.5.1 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-10814 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 4cf23fa82f5e Credits Max Boll b0lli Required privilege...

WordPress Code Embed Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)

Software Code Embed Type Plugin Vulnerable versions = 2.4 Fixed in 2.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8804 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 053ae53cce0b Credits Leo Required privilege Contributo...