plugin

Elink Embed Content Vulnerabilities

1 known security issue reported for the Elink Embed Content WordPress plugin. Most recent disclosed Aug 14, 2025.

1 medium

Running Elink Embed Content on your site? Check whether your installed version is affected.

elink – Embed Content <= 1.1.0 - Authenticated (Contributor+) Insufficient Input Validation

medium

The elink – Embed Content plugin for WordPress is vulnerable to Malicious Redirect in all versions up to, and including, 1.1.0. This is due to the plugin not restricting URLS that can be supplied through the elink shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

CVSS:: 6.4
Affected:: up to 1.1.0
Fix:: No patched version reported
Disclosed:: Aug 14, 2025

CVE-2025-7507 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database