https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T03:43:33.174413+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2023-4799 fkie_cve-2023-4799 2026-09-30T03:43:33.177084+00:00

The Magic Embeds WordPress plugin before 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

 https://vulnerability.circl.lu/vuln/ghsa-w6qw-76pv-8c27 GHSA-w6qw-76pv-8c27 2026-09-30T03:43:33.177204+00:00

The Magic Embeds WordPress plugin through 3.0.10 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

 https://vulnerability.circl.lu/vuln/gsd-2023-4799 gsd-2023-4799 2026-09-30T03:43:33.177240+00:00 gsd-2023-4799