Epiphyt

6 CVEs in 4 Epiphyt products, including Embed Privacy, Form Block, Embed-Privacy. Newest: CVE-2026-104814 (2026-10-06).

Epiphyt products with known CVEs

ProductCVEs
Embed Privacy2
Form Block2
Embed-Privacy1
Form-Block1
Epiphyt CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-104814High7.12026-10-06Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions.
CVE-2026-57346High7.12026-06-29Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affect…
CVE-2025-54693Critical9.02025-08-14Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell to a Web Server.This issue affects For…
CVE-2023-51694Medium6.52024-02-01Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epiphyt Embed Privacy allows Stored XSS.This issue affect…
CVE-2023-48300Medium6.32023-11-20The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored Cross-Site Scripting via `embed_privacy…
CVE-2023-30616Medium6.52023-04-20Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing no…