Vulnerabilities in Epiphyt

5 results

CVE-2023-48300MEDIUMEmbed Privacy missing escaping for show_all attribute in opt-out shortcodeEPSS 0.5%CVE-2023-30616MEDIUMCross Site Request Forgery due to missing nonce verification in form blockEPSS 0.3%CVE-2023-51694MEDIUMWordPress Embed Privacy Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-54693CRITICALWordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload VulnerabilityEPSS 0.3%CVE-2026-57346HIGHWordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerabilityEPSS 0.3%