Input validation vulnerability in EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor 3.9.12

A plugin called EmbedPress, which is used for embedding various types of content in WordPress, has a security vulnerability. This means that unauthorized people can insert harmful scripts into certain pages, which will run whenever someone visits those pages. The vulnerability affects all versions of the plugin up to 3.9.12 and is caused by not properly filtering and escaping user-inputted attributes. This means that even users with contributor-level permissions or higher can exploit this vulnerability.