WordPress plugin
Blrt WP Embed security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Blrt WP Embed vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.1 | Reflected Cross-Site Scripting ≤1.6.9No patch available | CVE-2025-23507 | |
| Medium6.5 | Authenticated (Contributor+) SQL Injection ≤1.6.9No patch available | CVE-2024-51606 |
- High7.1Reflected Cross-Site Scripting
≤1.6.9No patch available
- Medium6.5Authenticated (Contributor+) SQL Injection
≤1.6.9No patch available
Blrt WP Embed: common questions
Does Blrt WP Embed have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Blrt WP Embed: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Blrt WP Embed I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Blrt WP Embed vulnerability?
CVE-2025-23507, published Jan 16, 2025: Blrt WP Embed <= 1.6.9 - Reflected Cross-Site Scripting. Severity: High (CVSS 7.1).
Is any Blrt WP Embed vulnerability listed in CISA KEV?
No. None of the known Blrt WP Embed vulnerabilities is currently listed in the CISA KEV catalog.