Vulnerabilities

TI-2026-07799 CVE-2026-8877 · GHSA-6rcp-q8qr-wh4c

Responsive Video Embedder <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

LOW 28

The Responsive Video Embedder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rem_video' shortcode in versions up to, and including, 0.1.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00235 Published 2026-05-27 No fix listed CWE-79

TI-2023-17012 CVE-2023-34168 · GHSA-9g4p-qmx2-m5mj

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection

MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL Injection.This issue affects WP Report Post: from n/a through 2.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00902 Published 2023-12-18 No fix listed CWE-89

TI-2023-17015 CVE-2023-34171 · GHSA-qgrp-vp5r-mc7p

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-11-09 No fix listed CWE-352

Vulnerabilities

Filters

Responsive Video Embedder <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)