Unknown EmbedPress

5 known vulnerabilities in Unknown EmbedPress, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-85001 CVSS 6.8 medium The EmbedPress WordPress plugin before 4.6.7 does not sanitise and escape one of its Elementor widget settings before outputting it into…
  • CVE-2026-85002 CVSS 6.8 medium The EmbedPress WordPress plugin before 4.6.7 does not escape one of its block attributes before outputting it inside an HTML attribute…
  • CVE-2026-84936 CVSS 5.3 medium The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing…
  • CVE-2026-84927 CVSS 2.7 low The EmbedPress WordPress plugin before 4.6.4 does not perform a sufficient authorization check on one of its Google Reviews REST API…
  • CVE-2026-84926 CVSS 2.7 low The EmbedPress WordPress plugin before 4.6.4 does not correctly restrict access to one of its Google Reviews REST routes to…