CVE-2023-48300

CVE-2023-48300 affects the WordPress Embed Privacy plugin (versions ≤ 1.8.0). It enables a Stored Cross‑Site Scripting (XSS) via the shortcode embed_privacy_opt_out, due to insufficient input sanitization and output escaping on user‑supplied attributes. Authenticated attackers with contributor le...

CVE-2023-51694

The CVE-2023-51694 issue concerns the WordPress Embed Privacy plugin. Affected component: the Embed Privacy plugin for WordPress (versions 1.8.0 and earlier). Root cause: improper neutralization of input during web page generation, enabling Stored XSS. Impact: stored cross-site scripting vulnerab...