Log in Start free

mdempfle

Products

ProductCVEsExploitedLatest
Advanced iFrame11–Jul 8, 2026

Exploited and recent CVEs

  • CVE-2026-6742 Medium 6.4 Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute 0.3%
  • CVE-2026-25453 Medium 6.5 WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-8089 Medium 5.4 Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-6987 Medium 6.4 Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-1440 Medium 5.3 Advanced iFrame <= 2024.5 - Unauthenticated Settings Update 0.3%
  • CVE-2025-1437 Medium 6.4 Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-1439 Medium 6.4 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header 0.2%
  • CVE-2024-4365 Medium 6.4 Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-1341 Medium 4.9 Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-7069 Medium 6.4 Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-4775 Medium 6.4 Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.6%