TI-2025-03001 CVE-2025-3417 · GHSA-5mqr-58w3-g2gv
Embedder 1.3 - 1.3.5 - Authenticated (Subscriber+) Arbitrary Options Update
Priority MEDIUM 40
The Embedder plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_set_global_option() function in versions 1.3 to 1.3…