TI-2026-68298 CVE-2026-104814 · GHSA-99hr-mrh8-j9g3
Cross-site scripting in WordPress Form Block plugin
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
Vulnerabilities
6 records
TI-2026-41283 CVE-2026-57346 · GHSA-f3vj-vpq8-wfhm
WordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerability
Priority LOW 31
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal.
TI-2025-34456 CVE-2025-54693 · GHSA-3274-pvqm-8xhj
WordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload Vulnerability
Priority MEDIUM 41
Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell to a Web Server.This issue affects Form Block: from n/a through <= 1.5.5.
TI-2023-28340 CVE-2023-51694 · GHSA-283m-jhf4-68hp
WordPress Embed Privacy Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epiphyt Embed Privacy allows Stored XSS.This issue affects Embed Privacy: from n/a through 1.8.0.
TI-2023-26163 CVE-2023-48300
Embed Privacy missing escaping for show_all attribute in opt-out shortcode
Priority MEDIUM 61
The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored Cross-Site Scripting via `embed_privacy_opt_out` shortcode in versions up to, and including, 1.8.0 d…
TI-2023-14432 CVE-2023-30616
Cross Site Request Forgery due to missing nonce verification in form block
Priority LOW 29
Form block is a wordpress plugin designed to make form creation easier.