Medium · 6.5 CVE-2023-35094 EUVD-2023-39128GHSA-xmj3-r348-78fr

WordPress WP Matterport Shortcode Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)

Published Aug 30, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortcode plugin <= 2.1.4 versions.

Vendor	Product	Affected	Fixed
Julien Berthelot / MPEmbed	WP Matterport Shortcode	≤ 2.1.4	—