Skip to content
OpenAdvisories

Product · Stefan Bohacek

fediverse-embeds-wordpress-plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-46697

    Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint

    Fediverse Embeds embeds fediverse posts on WordPress sites. Prior to version 1.5.8, Fediverse Embeds registered an unauthenticated REST route ftf/media-proxy (includes/Media_Proxy.php) with permission_callback => __return_true that accepted a base64-encoded U…

    Stefan Bohacek fediverse-embeds-wordpress-plugin Web / CMS