Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Advanced iFrame — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Advanced iFrame, with AI-generated Chinese analysis, references, and POCs.

This vulnerability aggregation page focuses on the Advanced iFrame product and collects data related to specific weakness types such as cross-site scripting or improper input validation. The database compiles historical security advisories, covering the full available time range for this product. Readers can use this resource to track the vendor’s published security notices, analyze recurring weakness classes, and review the complete vulnerability history associated with Advanced iFrame.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-6742 Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute CWE-79 6.4 Medium 2026-07-08
CVE-2026-25453 WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-02-19
CVE-2025-8089 Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 5.4 Medium 2025-08-16
CVE-2025-6987 Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-07-26
CVE-2025-1440 Advanced iFrame <= 2024.5 - Unauthenticated Settings Update CWE-20 5.3 Medium 2025-03-26
CVE-2025-1437 Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-03-26
CVE-2025-1439 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header CWE-79 6.4 Medium 2025-03-26
CVE-2024-4365 Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-05-23
CVE-2024-32079 WordPress Advanced iFrame plugin <= 2024.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-04-15
CVE-2024-1341 Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 4.9 Medium 2024-02-29
CVE-2024-24870 WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium 2024-02-05
CVE-2023-51690 WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium 2024-02-01
CVE-2023-7069 Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-02-01
CVE-2023-4775 Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2023-11-13
CVE-2021-24953 Advanced iFrame < 2022 - Reflected Cross-Site Scripting CWE-79 6.1 - 2022-03-07

All 15 known CVE vulnerabilities affecting Advanced iFrame with full Chinese analysis, references, and POCs where available.