EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents

Güvenlik açıkları

• CVE-2024-43328kimlik doğrulamasız · tıklama gerekir≤ 4.0.9

  WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerability

  Kritik 9.8

• CVE-2024-31284kimlik doğrulamasız≤ 3.9.8

  WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2024-38707giriş gerekir≤ 4.0.4

  WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2023-51375giriş gerekir≤ 3.8.3

  WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerability

  Yüksek 8.8

• CVE-2026-48872kimlik doğrulamasız≤ 4.5.2

  WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerability

  Yüksek 7.5

• CVE-2023-3371kimlik doğrulamasız≤ 3.7.3

  EmbedPress <= 3.7.3 - Sensitive Information Exposure

  Yüksek 7.5

• CVE-2026-61961kimlik doğrulamasız · tıklama gerekir≤ 4.5.6

  WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-7796katılımcı+≤ 4.5.3

  EmbedPress <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block 'url' Attribute

  Orta 6.4

• CVE-2026-89330kimlik doğrulamasız · tıklama gerekir≤ 4.6.5

  EmbedPress <= 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' Parameters

  Orta 6.1

• CVE-2024-50461giriş gerekir≤ 4.0.14

  WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-43936giriş gerekir≤ 4.0.8

  WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerability

  Orta 5.4

• CVE-2024-1565katılımcı+≤ 3.9.10

  EmbedPress <= 3.9.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via PDF Widget URL

  Orta 5.4

• CVE-2024-5571katılımcı+≤ 4.0.1

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 4.0.1 - Authenticated

  Orta 5.4

• CVE-2024-4316katılımcı+≤ 3.9.16

  EmbedPress Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.16 - Authenticated (C

  Orta 5.4

• CVE-2024-3244katılımcı+≤ 3.9.14

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated

  Orta 5.4

• CVE-2024-3245katılımcı+≤ 3.9.14

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.14 - Authenticated

  Orta 5.4

• CVE-2024-2688katılımcı+≤ 3.9.12

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.12 - Authenticated

  Orta 5.4

• CVE-2024-2468katılımcı+≤ 3.9.12

  EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute

  Orta 5.4

• CVE-2024-1802katılımcı+≤ 3.9.10

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated

  Orta 5.4

• CVE-2024-2128katılımcı+≤ 3.9.10

  EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor <= 3.9.10 - Authenticated

  Orta 5.4

• CVE-2024-1425katılımcı+≤ 3.9.8

  EmbedPress <= 3.9.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Google Calendar Widget Link

  Orta 5.4

• CVE-2024-1349katılımcı+≤ 3.9.8

  EmbedPress <= 3.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Orta 5.4

• CVE-2023-6986katılımcı+→ 3.9.5

  EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor <= 3.9.5 - Authenticated (Contributor+

  Orta 5.4

• CVE-2023-4283katılımcı+≤ 3.8.2

  EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  Orta 5.4

• CVE-2024-31274kimlik doğrulamasız≤ 3.9.11

  WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2023-4282abone+≤ 3.8.2

  EmbedPress <= 3.8.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Delete via admin_post_remove and remove_private_data

  Orta 4.3