Iframe Project Iframe — known CVE vulnerabilities

Every CVE whose affected-product data names Iframe Project Iframe, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-52125 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webvitaly iframe allows Stored…
• CVE-2023-4919 — CVSS 6.4 (medium): The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `iframe` shortcode in versions up to, and including…
• CVE-2020-12696 — CVSS 6.1 (medium): The iframe plugin before 4.5 for WordPress does not sanitize a URL.
• CVE-2023-24394 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy iframe popup plugin <= 3.3 versions.