Skip to content

Known vulnerabilities in WPDeveloper EmbedPress

Is your version affected?

CVE Summary Score Published
CVE-2026-61961 Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions 7.1 High Aug 6, 2026
CVE-2026-48872 Unauthenticated Sensitive Data Exposure in EmbedPress <= 4.5.2 versions 7.5 High Jun 15, 2026
CVE-2024-38707 Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control… 6.3 Medium Nov 1, 2024
CVE-2024-50461 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper… 6.5 Medium Oct 28, 2024
CVE-2024-43936 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper… 6.5 Medium Aug 29, 2024
CVE-2024-43328 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress… 8.3 High Aug 19, 2024
CVE-2023-51375 Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3 4.3 Medium Jun 21, 2024
CVE-2024-31284 Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8 6.5 Medium Jun 9, 2024
CVE-2024-31274 Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11 5.3 Medium Jun 9, 2024

Other WPDeveloper products