Skip to content
OpenAdvisories

Vendor

Stefan Bohacek

3 known vulnerabilities.

Products

fediverse-embeds-wordpress-plugin 2 Fediverse Embeds 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-46698

    Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action

    Fediverse Embeds embeds fediverse posts on WordPress sites. Prior to version 1.5.9, Fediverse Embeds registered the unauthenticated AJAX action wp_ajax_nopriv_ftf_get_site_info (includes/Site_Info.php) that verified a nonce ftf-fediverse-embeds-nonce and then…

    Stefan Bohacek fediverse-embeds-wordpress-plugin Web / CMS