Input validation vulnerability in EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor 3.9.1

The EmbedPress – Embed PDF, YouTube, Google Docs, Vimeo, Wistia Videos, Audios, Maps & Any Documents in Gutenberg & Elementor plugin for WordPress has a security vulnerability. This vulnerability is called Reflected Cross-Site Scripting. It affects all versions of the plugin up to, and including, 3.9.1. This means that if someone is not careful, it can be possible for unauthorised people to inject malicious web scripts into pages. These scripts would then run if a user was tricked into performing an action such as clicking on a link. To protect yourself from this vulnerability, you should make sure to update your plugin to the latest version.