Unknown Fediverse Embeds vulnerabilities

2 CVEs affecting Unknown Fediverse Embeds, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-12517, published 2026-07-09.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-12517, published 2026-07-09. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Fediverse Embeds WordPress plugin before 1.5.8 does not validate the destination of the server-side request performed by an unauthenticated site-info endpoint before fetching it, allowing…
• CVE-2026-12516, published 2026-07-09. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Fediverse Embeds WordPress plugin before 1.5.8 does not validate the destination of the server-side request performed by an unauthenticated media-proxying endpoint, allowing anonymous users to…