Vulnerabilities

TI-2026-47274 CVE-2026-66603 · GHSA-rpmr-654g-p9gh

WordPress Draft List plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Artiss Draft List simple-draft-list allows Stored XSS.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-18 No fix listed CWE-79

TI-2024-08170 CVE-2024-8804 · GHSA-qwc7-2536-jw6j

Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functionality in all versions up to, and including, 2.4 due to insufficient restrictions on who can utilize t…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-10-04 No fix listed CWE-79

TI-2023-27241 CVE-2023-49837 · GHSA-qw3x-hp2h-3hcq

WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability

LOW 29

Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a through 2.3.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2024-03-21 No fix listed CWE-400

TI-2023-14938 CVE-2023-31232 · GHSA-4gxw-pg9g-q925

WordPress Plugins List Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-18 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Draft List plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability

Code Embed <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability

WordPress Plugins List Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)