The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Simple Iframe WordPress plugin before 1.2.0 does not properly validate one of its WordPress block attribute's content, which may allow users whose role is at least that of a contributor to conduct Stored Cross-Site Scripting attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Simple Iframe Plugin | — | Update simple-iframe plugin to version 1.2.0, or a newer patched version | May 15, 2025 | Jun 19, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub