WordPress security by component

PowerBI Embed Reports

Plugin description

PowerBI Embed Reports is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 18, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: embed-power-bi-reports

Latest vulnerability

CVE-2025-10750: PowerBI Embed Reports: Sensitive information exposure

PowerBI Embed Reports is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.

PublishedOct 18, 2025

Safe version guidanceSee mitigation notes

		Safe version
Oct 18, 2025	CVE-2025-10750 PowerBI Embed Reports: Sensitive information exposure PowerBI Embed Reports is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.	See mitigation notes	CVE5.3 NVDPending
Dec 12, 2024	CVE-2024-11901 PowerBI Embed Reports: Cross-site scripting PowerBI Embed Reports is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending