Unknown EmbedPress vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20267

Newest CVEs

• CVE-2026-85000

  EmbedPress < 4.6.8 - Unauthenticated YouTube API Quota Consumption and Database Bloating

  Unknown · EmbedPress

  Medium5.3
• CVE-2026-85001

  EmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle Attribute

  Unknown · EmbedPress

  Medium6.8
• CVE-2026-85002

  EmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block Attributes

  Unknown · EmbedPress

  Medium6.8
• CVE-2026-84936

  EmbedPress 4.6.0 - 4.6.3 - Unauthenticated Google Reviews API Quota Consumption and Database Bloat

  Unknown · EmbedPress

  Medium5.3
• CVE-2026-84927

  EmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews Modification

  Unknown · EmbedPress

  Low2.7
• CVE-2026-84926

  EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route

  Unknown · EmbedPress

  Low2.7
• CVE-2026-10526

  EmbedPress < 4.6.1 - Unauthenticated Blind SSRF

  Unknown · EmbedPress

  Medium5.8
• CVE-2023-5749

  EmbedPress < 3.9.2 - Reflected XSS

  Unknown · EmbedPress

  Medium6.1
• CVE-2023-5750

  EmbedPress < 3.9.2 - Reflected XSS

  Unknown · EmbedPress

  Medium6.1