Input validation vulnerability in EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor 3.9.14

The EmbedPress plugin for WordPress, which allows you to embed various types of content such as PDFs, Google Docs, videos, and maps, has a security vulnerability. This vulnerability, known as Stored Cross-Site Scripting, affects all versions up to 3.9.14. Essentially, this means that the plugin does not properly protect against harmful code being inserted into pages by users with a certain level of access. This could potentially allow attackers to execute their own scripts on pages that have been compromised.