CVE-2026-61961 Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions

Description

Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
EmbedPress 4.5	earliest → 4.5.6	No fix stated

Other CVEs of EmbedPress

The 9 CVEs of EmbedPress →

CVE-2026-48872 Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions 7.5 High CVE-2024-38707 Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control… 6.3 Medium CVE-2024-50461 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper… 6.5 Medium CVE-2024-43936 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper… 6.5 Medium