stefanbohacek

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

stefanbohacek records in CISA KEV

No stefanbohacek vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-34327 CVE-2026-46698

Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action

MEDIUM 63

Fediverse Embeds embeds fediverse posts on WordPress sites.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-06-11 Fixed in 1.5.9 CWE-918

TI-2024-35147 CVE-2024-52476 · GHSA-6vjf-5pvr-cw5f

WordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Stefan Bohacek Fediverse Embeds fediverse-embeds allows Upload a Web Shell to a Web Server.This issue affects Fediverse Embeds: from n/a through <= 1.5.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00543 Published 2024-12-02 No fix listed CWE-434

TI-2026-34326 CVE-2026-46697

Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint

LOW 38

Fediverse Embeds embeds fediverse posts on WordPress sites.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00234 Published 2026-06-11 Fixed in 1.5.8 CWE-918

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0