6.3
Medium
CVE-2024-38707 Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EmbedPress 4.0 | earliest → 4.0.4 | No fix stated |
Other CVEs of EmbedPress
The 9 CVEs of EmbedPress →
CVE-2026-61961
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions
7.1
High
CVE-2026-48872
Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions
7.5
High
CVE-2024-50461
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Medium
CVE-2024-43936
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper…
6.5
Medium