Log in Start free

Chris Coyier

Products

ProductCVEsExploitedLatest
CodePen Embedded Pens Shortcode2–Oct 28, 2024
CodePen Embed Block1–Jun 20, 2025

Exploited and recent CVEs

  • CVE-2025-50023 Medium 5.9 WordPress CodePen Embed Block plugin <= 1.2.0 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2024-50440 Medium 6.5 WordPress CodePen Embedded Pens Shortcode plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-37960 Medium 6.5 WordPress CodePen Embedded Pens Shortcode plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability 0.3%