VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Advanced iFrame security & vulnerabilities

advanced-iframe— active installsLast vulnerability Jul 7, 2026

No known unpatched vulnerabilities in the latest version

All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
13Known vulnerabilities
  • Critical0
  • High0
  • Medium13
  • Low0
Vulnerabilities per year
2022: 1 vulnerability1222023: 1 vulnerability1232024: 4 vulnerabilities4242025: 5 vulnerabilities5252026: 2 vulnerabilities226

All Advanced iFrame vulnerabilities

Advanced iFrame vulnerabilities
SeverityVulnerabilityCVEPublished
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute
≤2026.1Update to 2026.2
CVE-2026-6742
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2025.10Update to 2026.0
CVE-2026-25453
Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2025.6Update to 2025.7
CVE-2025-8089
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2025.5Update to 2025.6
CVE-2025-6987
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header
≤2024.5Update to 2025.0
CVE-2025-1439
Medium5.3Unauthenticated Settings Update
≤2024.5Update to 2025.0
CVE-2025-1440
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2025.2Update to 2025.3
CVE-2025-1437
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2024.3Update to 2024.4
CVE-2024-4365
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤2024.2Update to 2024.3
CVE-2024-32079
Medium4.9Authenticated (Contributor+) Stored Cross-Site Scripting
≤2024.1Update to 2024.2
CVE-2024-1341
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2023.10Update to 2024.0
CVE-2023-7069
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤2023.8Update to 2023.9
CVE-2023-4775
Medium6.1Advanced iFrame <= 2021.9 Reflected Cross-Site Scripting
≤2021.9Update to 2022
CVE-2021-24953

Advanced iFrame: common questions

Does Advanced iFrame have known vulnerabilities?

Yes. VulnCrest Radar lists 13 known vulnerabilities in Advanced iFrame: 13 medium. None are known to affect version null.

How do I check which version of Advanced iFrame I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Advanced iFrame vulnerability?

CVE-2026-6742, published Jul 7, 2026: Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute. Severity: Medium (CVSS 6.4).

Is any Advanced iFrame vulnerability listed in CISA KEV?

No. None of the known Advanced iFrame vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?