CVE-2026-85002 | EmbedPress Plugin up to 4.6.6 on WordPress Block Attributes cross site scripting

September 27, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in EmbedPress Plugin up to 4.6.6 on WordPress. This vulnerability affects unknown code of the component Block Attributes. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-85002. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More