Stefanbohacek vulnerabilities
We track 2 vulnerabilities in Stefanbohacek products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2026.
2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score
Latest Stefanbohacek vulnerabilities
- 7.5 High severity
fediverse-embeds-wordpress-plugin: Server-Side Request Forgery
Fediverse Embeds embeds fediverse posts on WordPress sites. Prior to version 1.5.8, Fediverse Embeds registered an unauthenticated REST route ftf/media-proxy (includes/Media_Proxy.php) with permission_callback => __return_true that accepted a base64-encoded UR
- 10.0 Critical severity
Fediverse Embeds: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Stefan Bohacek Fediverse Embeds fediverse-embeds allows Upload a Web Shell to a Web Server.This issue affects Fediverse Embeds: from n/a through <= 1.5.3.