Wp Matterport Shortcode

wp_matterport_shortcode

Vendor: Mpembed • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-4290 1Mpembed 1Wp Matterport Shortcode Jun 17, 2026 Oct 16, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected Cross-Site Scripting issues which could be used against high p...Show more The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as adminShow less
CVE-2023-4289 1Mpembed 1Wp Matterport Shortcode Jun 17, 2026 Oct 16, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users wit...Show more The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksShow less
CVE-2023-35094 1Mpembed 1Wp Matterport Shortcode Jun 17, 2026 Aug 30, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Berthelot / MPEmbed WP Matterport Shortcode plugin <= 2.1.4 versions.