EmbedPress vulnerabilities

3 known vulnerabilities in EmbedPress from Wpdeveloper. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EmbedPress: Missing Authorization

  CVE-2024-38707Nov 1, 2024Wpdeveloper

  Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4.

• 9.8 Critical severity

  EmbedPress: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-43328Aug 19, 2024Wpdeveloper

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through 4.0.9.

• 7.5 High severity

  EmbedPress – PDF Embedder, Embed YouTube…: Use of Hard-coded Cryptographic Key

  CVE-2023-3371Jun 27, 2023Wpdevteam

  The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lock_content_form_handler' and 'display_password_form' function in versions up to, and including, 3.7.3. This makes it possible for unau