Description
Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPDeveloper | EmbedPress | ≤ 4.5.6 | — |
High · 7.1
CVE-2026-61961
EUVD-2026-53957GHSA-fqmv-8hpc-mxxm
WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability
Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack