Skip to content

WPDeveloper · product

EmbedPress

11 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerabilityCVE-2024-43328WPDeveloper · CVSS 8.3 · 0.5% likely

    CWE-22

  2. EmbedPress < 3.9.2 - Reflected XSSCVE-2023-5750Wpdeveloper · 0.5% likely

    CWE-79

  3. EmbedPress < 3.9.2 - Reflected XSSCVE-2023-5749Wpdeveloper · 0.5% likely

    CWE-79

  4. WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerabilityCVE-2024-38707WPDeveloper · CVSS 6.3 · 0.4% likely

    CWE-862

  5. WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerabilityCVE-2024-31284WPDeveloper · CVSS 6.5 · 0.4% likely

    CWE-862

  6. WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerabilityCVE-2026-48872WPDeveloper · CVSS 7.5 · 0.3% likely

    CWE-639

  7. WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerabilityCVE-2024-31274WPDeveloper · CVSS 5.3 · 0.3% likely

    CWE-862

  8. WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerabilityCVE-2023-51375WPDeveloper · CVSS 4.3 · 0.3% likely

    CWE-862

  9. WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-43936WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

  10. WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-50461WPDeveloper · CVSS 6.5 · 0.3% likely

    CWE-79

  11. WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-61961WPDeveloper · CVSS 7.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.