https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-11203.htmlhttps://patchthecve.com/cve/CVE-2024-11203.htmlWed, 17 Jun 2026 06:57:16 +0000MEDIUM 6.4: The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps in Gutenberg Block & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘provider_name parameter in all versions up to, and including, 4.1.3 due to https://patchthecve.com/cve/CVE-2024-38707.htmlhttps://patchthecve.com/cve/CVE-2024-38707.htmlWed, 17 Jun 2026 07:40:54 +0000MEDIUM 6.3: Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4.https://patchthecve.com/cve/CVE-2024-50461.htmlhttps://patchthecve.com/cve/CVE-2024-50461.htmlWed, 17 Jun 2026 08:04:31 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedPress embedpress allows Stored XSS.This issue affects EmbedPress: from n/a through <= 4.0.14.https://patchthecve.com/cve/CVE-2024-43936.htmlhttps://patchthecve.com/cve/CVE-2024-43936.htmlWed, 17 Jun 2026 07:52:01 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper EmbedPress allows Stored XSS.This issue affects EmbedPress: from n/a through 4.0.8.https://patchthecve.com/cve/CVE-2024-43328.htmlhttps://patchthecve.com/cve/CVE-2024-43328.htmlWed, 17 Jun 2026 07:50:48 +0000HIGH 8.3: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through 4.0.9.https://patchthecve.com/cve/CVE-2023-51375.htmlhttps://patchthecve.com/cve/CVE-2023-51375.htmlWed, 17 Jun 2026 06:40:50 +0000MEDIUM 4.3: Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.8.3.https://patchthecve.com/cve/CVE-2024-1565.htmlhttps://patchthecve.com/cve/CVE-2024-1565.htmlWed, 17 Jun 2026 07:04:32 +0000MEDIUM 6.4: The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the PDF Widget URL in all versions up to, and including, 3.9.10 due to insufficient input sanitization ahttps://patchthecve.com/cve/CVE-2024-31284.htmlhttps://patchthecve.com/cve/CVE-2024-31284.htmlWed, 17 Jun 2026 07:28:07 +0000MEDIUM 6.5: Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.8.https://patchthecve.com/cve/CVE-2024-31274.htmlhttps://patchthecve.com/cve/CVE-2024-31274.htmlWed, 17 Jun 2026 07:28:06 +0000MEDIUM 5.3: Missing Authorization vulnerability in WPDeveloper EmbedPress.This issue affects EmbedPress: from n/a through 3.9.11.https://patchthecve.com/cve/CVE-2024-5571.htmlhttps://patchthecve.com/cve/CVE-2024-5571.htmlWed, 17 Jun 2026 08:16:12 +0000MEDIUM 6.4: The EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the plugin's EmbedPress PDF widget in all versions up to, and inc