Vulnerabilities

TI-2025-17274 CVE-2025-23507 · GHSA-h8qv-cwpv-997w

WordPress Blrt WP Embed plugin <= 1.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows Reflected XSS.This issue affects Blrt WP Embed: from n/a through <= 1.6.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00416 Published 2025-01-22 No fix listed CWE-79

TI-2024-34520 CVE-2024-51606 · GHSA-h2r5-7qqj-7p84

WordPress Blrt WP Embed plugin <= 1.6.9 - SQL Injection vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Blrt Blrt WP Embed blrt-wp-embed allows SQL Injection.This issue affects Blrt WP Embed: from n/a through <= 1.6.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00544 Published 2024-11-09 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Blrt WP Embed plugin <= 1.6.9 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress Blrt WP Embed plugin <= 1.6.9 - SQL Injection vulnerability