Vulnerabilities > Wpdeveloper > Embedpress > 4.0.4

DATE CVE VULNERABILITY TITLE RISK
2024-11-01 CVE-2024-38707 Missing Authorization vulnerability in Wpdeveloper Embedpress
Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4.
network
low complexity
wpdeveloper CWE-862
8.8
8.8
2024-08-19 CVE-2024-43328 Path Traversal vulnerability in Wpdeveloper Embedpress
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPDeveloper EmbedPress allows PHP Local File Inclusion.This issue affects EmbedPress: from n/a through 4.0.9.
network
low complexity
wpdeveloper CWE-22
critical
 9.8
9.8