Input validation vulnerability in EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor 3.9.10

A plugin for WordPress called EmbedPress allows users to add PDFs, videos, audios, maps, and other documents to their website. However, it has a security vulnerability that allows attackers to inject harmful code into web pages. This can happen when a user adds a PDF using the plugin’s widget and the URL is not properly checked for malicious code. This means that someone with higher-level permissions on the website can add code that will run whenever someone visits the affected page.