plugin

Embed Rss Vulnerabilities

2 known security issues reported for the Embed Rss WordPress plugin. Most recent disclosed Feb 7, 2025.

1 medium

Running Embed Rss on your site? Check whether your installed version is affected.

Embed RSS [embed-rss] <= 3.1 (unfixed + closed)

unknown

[en] Missing Authorization vulnerability in DeannaS Embed RSS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Embed RSS: from n/a through 3.1.

Affected:: up to 3.1
Fix:: No patched version reported
Disclosed:: Feb 7, 2025

CVE-2025-25081 on NVD →

Embed RSS <= 3.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution

medium

The The Embed RSS plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with S...

CVSS:: 6.3
Affected:: up to 3.1
Fix:: No patched version reported
Disclosed:: Feb 3, 2025

CVE-2025-25081 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database