WordPress security by component
Fediverse Embeds
Plugin description
Fediverse Embeds is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 09, 2026; the highest CVE/CNA score is 10.
Plugin slug:
fediverse-embedsLatest vulnerability
CVE-2026-12517: Fediverse Embeds: Server-side request forgery
Fediverse Embeds is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is < 1.5.8.
| Safe version |
|
||
|---|---|---|---|
| Jul 09, 2026 |
CVE-2026-12517
Fediverse Embeds: Server-side request forgery
Fediverse Embeds is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is < 1.5.8.
|
1.5.8 |
CVE5.3
NVDPending
|
| Jul 09, 2026 |
CVE-2026-12516
Fediverse Embeds: Server-side request forgery
Fediverse Embeds is affected by server-side request forgery. The vulnerable path is reachable without authentication. The vulnerable server can be induced to make attacker-selected network requests. The published affected range is < 1.5.8.
|
1.5.8 |
CVE5.3
NVDPending
|
| Dec 02, 2024 |
CVE-2024-52476
Fediverse Embeds: Dangerous file upload
Fediverse Embeds is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE10.0
NVDPending
|