Access violation vulnerability in EmbedPress – Embed PDF, PDF 3D FlipBook, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor 4.0.4

The EmbedPress plugin used on WordPress websites has a security issue that could allow unauthorized users to change data. This is because the plugin does not check for the proper permissions when using certain functions like get_instagram_userdata_ajax, sync_instagram_data_ajax, and delete_instagram_account. The vulnerability affects versions up to 4.0.4, meaning that even the most recent version of the plugin is at risk. As a result, attackers who have subscriber-level access or higher could potentially alter Instagram settings.