mdempfle Advanced iFrame vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20255
4. 20262

Newest CVEs

• CVE-2026-6742

  Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute

  mdempfle · Advanced iFrame

  Medium6.4
• CVE-2026-25453

  WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability

  mdempfle · Advanced iFrame

  Medium6.5
• CVE-2025-8089

  Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  mdempfle · Advanced iFrame

  Medium5.4
• CVE-2025-6987

  Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  mdempfle · Advanced iFrame

  Medium6.4
• CVE-2025-1440

  Advanced iFrame <= 2024.5 - Unauthenticated Settings Update

  mdempfle · Advanced iFrame

  Medium5.3
• CVE-2025-1437

  Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

  mdempfle · Advanced iFrame

  Medium6.4
• CVE-2025-1439

  Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header

  mdempfle · Advanced iFrame

  Medium6.4
• CVE-2024-4365

  Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  mdempfle · Advanced iFrame

  Medium6.4
• CVE-2024-1341

  Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  mdempfle · Advanced iFrame

  Medium4.9
• CVE-2023-7069

  Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting

  mdempfle · Advanced iFrame

  Medium6.4