WPDevelopers/embedpress

WPDevelopers/embedpress

Releases171

Frequency3 weeks 8 hours

Last Release about 1 month ago

Stars9

EmbedPress expands the default WordPress embed options and allows you to embed media from over 75 sites.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-11203 ↗	Nov 28, 2024Thursday, 28 November 2024, 09:15	6.4 MEDIUM	—
The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘provider_name parameter in all versions up to, and including, 4.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.