Vulnerabilities

TI-2026-34326 CVE-2026-46697

Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint

LOW 38

Fediverse Embeds embeds fediverse posts on WordPress sites.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00234 Published 2026-06-11 Fixed in 1.5.8 CWE-918

TI-2026-34327 CVE-2026-46698

Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action

MEDIUM 63

Fediverse Embeds embeds fediverse posts on WordPress sites.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-06-11 Fixed in 1.5.9 CWE-918

TI-2024-35147 CVE-2024-52476 · GHSA-6vjf-5pvr-cw5f

WordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Stefan Bohacek Fediverse Embeds fediverse-embeds allows Upload a Web Shell to a Web Server.This issue affects Fediverse Embeds: from n/a through <= 1.5.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00543 Published 2024-12-02 No fix listed CWE-434

Vulnerabilities

Filters

Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint

Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action

WordPress Fediverse Embeds plugin <= 1.5.3 - Arbitrary File Upload vulnerability