Threats tagged 'ghsa-4967-wgq5-m2vr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.2%	CVE-2026-85001EmbedPress (WordPress plugin) · Cross-Site Scripting (XSS) Medium6.8EPSS 0.2%2026-09-30CVE Database V5CVE-2026-85001 The EmbedPress WordPress plugin before 4.6.7 does not sanitise and escape one of its Elementor widget settings before outputting it into an HTML attribute, which could allow users with the Contributor role or above to inject arbitrary web scripts that execute when the affected content is viewed. EPSS 0.2%Vulnerability CWE-79 #ghsa-4967-wgq5-m2vr	CVE Database V5	2026-09-30

Page 1 of 1