Epiphyt
4 CVEs across 4 Epiphyt products. Browse Epiphyt vulnerabilities, severities, and proof-of-concept exploits.
Epiphyt products with known CVEs
Epiphyt CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-57346 | High | 7.1 | 2026-06-29 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal.
This issue affect… |
CVE-2025-54693 | Critical | 9.0 | 2025-08-14 | Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell to a Web Server.This issue affects For… |
CVE-2023-51694 | Medium | 6.5 | 2024-02-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epiphyt Embed Privacy allows Stored XSS.This issue affect… |
CVE-2023-48300 | Medium | 6.3 | 2023-11-20 | The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored Cross-Site Scripting via `embed_privacy… |
CVE-2023-30616 | Medium | 6.5 | 2023-04-20 | Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing no… |