CVE-2023-49837

CVE-2023-49837 concerns the WordPress Code Embed (simple-embed-code) plugin. A Denial of Service vulnerability exists in Code Embed versions ≤ 2.3.6 that allows an authenticated attacker with Contributor+ privileges to trigger uncontrolled resource consumption, potentially impacting site availabi...

CVE-2024-8804

CVE-2024-8804 affects the WordPress Code Embed plugin, with a stored XSS in the plugin’s script embed feature that affects all versions up to 2.4. An attacker with contributor-level access or higher can inject arbitrary scripts that execute when users load the affected pages. The vulnerability is...