The Sketchfab Embed plugin used in WordPress is not secure and can be attacked by hackers. This is because it does not properly clean or protect the information entered into it. As a result, attackers with contributor-level access or higher can add harmful web scripts to pages that will be executed when a user visits those pages.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
