CVE-2026-61961

HIGH

CVE: CVE-2026-61961 - Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4Sign in to save

CVSS

7.1

CVSS v3.1

EPSS

0.2%

Exploit Prediction Score

Published

August 6, 2026

Exploitability

EPSS probability 0.2%

Description

Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.

CWE-79

No package data available.

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://patchstack.com/database/wordpress/plugin/embedpress/vulnerability/wordpress-embedpress-plugin-4-5-6-cross-site-s…