Tagembed vulnerabilities

Products

• Tagembed 3

Latest Tagembed CVEs

Newest publication first

1. CVE-2026-66590 WordPress Tagembed plugin <= 7.4 - Cross Site Scripting (XSS) vulnerability

   Published 2026-08-20

   High·CVSS 7.1

   Unauthenticated Cross Site Scripting (XSS) in Tagembed <= 7.4 versions.

2. CVE-2024-34804 WordPress Tagembed plugin <= 5.8 - Broken Access Control vulnerability

   Published 2024-06-11

   Medium·CVSS 5.4

   Missing Authorization vulnerability in Tagembed.This issue affects Tagembed: from n/a through 5.8.

3. CVE-2024-32561 WordPress Tagembed plugin <= 4.7 - Cross Site Scripting (XSS) vulnerability

   Published 2024-04-18

   Medium·CVSS 6.5

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tagembed allows Stored XSS.This issue affects Tagembed: from n/a through 4.7.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.