cleantalk
Vulnerabilities and Security Researches

EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg, CVE-2024-43328

CVE, Research URL

CVE-2024-43328

Published on
Aug 20, 2024
Research Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through 4.0.9.
Affected versions
max 4.0.10.
Status
vulnerable