EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents

Уязвимости

• CVE-2024-43328без авторизации · нужен клик≤ 4.0.9

  WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability

  Критич. 9.8

• CVE-2024-31284без авторизации≤ 3.9.8

  WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2024-38707нужен вход≤ 4.0.4

  WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-51375нужен вход≤ 3.8.3

  WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2026-48872без авторизации≤ 4.5.2

  WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability

  Высокий 7.5

• CVE-2023-3371без авторизации≤ 3.7.3

  EmbedPress <= 3.7.3 - Sensitive Information Exposure

  Высокий 7.5

• CVE-2026-61961без авторизации · нужен клик≤ 4.5.6

  WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-92727участник+≤ 4.6.6

  EmbedPress <= 4.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slidesShow' Block Attribute

  Средний 6.4

• CVE-2026-7796участник+≤ 4.5.3

  EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute

  Средний 6.4

• CVE-2026-89330без авторизации · нужен клик≤ 4.6.5

  EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters

  Средний 6.1

• CVE-2024-50461нужен вход≤ 4.0.14

  WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-43936нужен вход≤ 4.0.8

  WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-1565участник+≤ 3.9.10

  EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL

  Средний 5.4

• CVE-2024-5571участник+≤ 4.0.1

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated

  Средний 5.4

• CVE-2024-4316участник+≤ 3.9.16

  EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (C

  Средний 5.4

• CVE-2024-3244участник+≤ 3.9.14

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated

  Средний 5.4

• CVE-2024-3245участник+≤ 3.9.14

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated

  Средний 5.4

• CVE-2024-2688участник+≤ 3.9.12

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated

  Средний 5.4

• CVE-2024-2468участник+≤ 3.9.12

  EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute

  Средний 5.4

• CVE-2024-1802участник+≤ 3.9.10

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated

  Средний 5.4

• CVE-2024-2128участник+≤ 3.9.10

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated

  Средний 5.4

• CVE-2024-1425участник+≤ 3.9.8

  EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link

  Средний 5.4

• CVE-2024-1349участник+≤ 3.9.8

  EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2023-6986участник+→ 3.9.5

  EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+

  Средний 5.4

• CVE-2023-4283участник+≤ 3.8.2

  EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Средний 5.4

• CVE-2024-31274без авторизации≤ 3.9.11

  WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2023-4282подписчик+≤ 3.8.2

  EmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data

  Средний 4.3