SmugMug Embed vulnerabilities
We track 1 vulnerability in SmugMug Embed products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest SmugMug Embed vulnerabilities
- 8.8 High severity
SmugMug Embed: Improper Neutralization of Input During Web Page Generation
The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data before outputting it, allowing unauthenticated users to store arbitrary web scripts