Epiphyt

Products

ProductCVEsExploitedLatest
Embed Privacy3–Jun 29, 2026
Form Block3–Oct 6, 2026

Exploited and recent CVEs

  • CVE-2026-104814 High 7.1 WordPress Form Block plugin <= 1.8.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57346 High 7.1 WordPress Embed Privacy plugin <= 1.12.3 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2025-54693 Critical 9.0 WordPress Form Block Plugin <= 1.5.5 - Arbitrary File Upload Vulnerability 0.3%
  • CVE-2023-51694 Medium 6.5 WordPress Embed Privacy Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-48300 Medium 6.3 Embed Privacy missing escaping for show_all attribute in opt-out shortcode 0.5%
  • CVE-2023-30616 Medium 6.5 Cross Site Request Forgery due to missing nonce verification in form block 0.3%