WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents

EmbedPress lets you embed videos, pages, social feeds, embed PDF 3D flipbooks & other content on WordPress without coding & enhance storytelling.

31Reported vulnerabilities
9.8Highest CVSS score
4.6.4Latest version
100,000+Active installs

What to do now

Update EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents to 4.6.0 or later. 31 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 18, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-5749 Medium 6.1 0.6% Before 3.9.2 3.9.2 December 11, 2023
CVE-2023-5750 Medium 6.1 0.5% Before 3.9.2 3.9.2 December 11, 2023
CVE-2024-43328 Critical 9.8 0.5% 4.0.9 and earlier 4.0.10 August 16, 2024
CVE-2023-3371 High 7.5 0.5% 3.7.3 and earlier 3.8.0 June 27, 2023
CVE-2026-61961 High 7.2 0.2% 4.5.6 and earlier 4.6.0 August 3, 2026
CVE-2026-10526 High 7.2 0.2% 4.6.0 and earlier 4.6.1 July 27, 2026
CVE-2026-7796 Medium 6.4 0.3% 0 to 4.5.3 (inclusive) 4.5.4 June 6, 2026
CVE-2024-43936 Medium 6.4 0.3% 4.0.8 and earlier 4.0.9 August 26, 2024
CVE-2024-50461 Medium 6.4 0.2% 4.0.14 and earlier 4.1.0 October 24, 2024
CVE-2024-11203 Medium 5.4 0.4% Before 4.1.4 4.1.4 November 28, 2024
CVE-2024-1565 Medium 5.4 0.3% Before 3.9.11 3.9.11 June 13, 2024
CVE-2024-5571 Medium 5.4 0.3% Before 4.0.2 4.0.2 June 5, 2024
CVE-2024-4316 Medium 5.4 0.3% 3.9.16 and earlier 3.9.17 May 14, 2024
CVE-2024-3244 Medium 5.4 0.5% 3.9.14 and earlier 3.9.15 April 9, 2024
CVE-2024-3245 Medium 5.4 0.3% 3.9.14 and earlier 3.9.15 April 6, 2024
CVE-2024-2688 Medium 5.4 0.3% 3.9.12 and earlier 3.9.13 March 23, 2024
CVE-2024-2468 Medium 5.4 0.3% 3.9.12 and earlier 3.9.13 March 23, 2024
CVE-2024-1802 Medium 5.4 0.3% 3.9.10 and earlier 3.9.11 March 7, 2024
CVE-2024-2128 Medium 5.4 0.4% 3.9.10 and earlier 3.9.11 March 7, 2024
CVE-2024-1425 Medium 5.4 0.5% Before 3.9.9 3.9.9 February 29, 2024
CVE-2024-1349 Medium 5.4 0.4% Before 3.9.9 3.9.9 February 29, 2024
CVE-2023-6986 Medium 5.4 0.4% Before 3.9.6 3.9.6 January 3, 2024
CVE-2023-4283 Medium 5.4 0.5% 3.8.2 and earlier 3.8.3 August 10, 2023
CVE-2026-48872 Medium 5.3 0.3% 4.5.2 and earlier 4.5.3 June 1, 2026
CVE-2024-38707 Medium 5.3 0.4% 4.0.4 and earlier 4.0.5 July 11, 2024
CVE-2024-31274 Medium 5.3 0.3% 3.9.11 and earlier 3.9.12 April 5, 2024
CVE-2024-31284 Medium 5.3 0.4% 3.9.8 and earlier 3.9.9 April 5, 2024
WF-a7cf1c70-9778-4b50-b494-d0b1d0277b35 Medium 5.3 — Before 3.9.5 3.9.5 December 8, 2023
CVE-2023-4282 Medium 4.3 0.5% 3.8.2 and earlier 3.8.3 August 10, 2023
CVE-2024-1803 Medium 4.3 0.3% 3.9.12 and earlier 3.9.13 May 23, 2024
CVE-2023-51375 Medium 4.3 0.3% Before 3.8.4 3.8.4 September 7, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.