Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Advanced iFrame — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Advanced iFrame, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities associated with the Advanced iFrame product, managed by its respective vendor. It aggregates a comprehensive collection of security flaws affecting this software solution, covering reported incidents from 2010 to 2024. Users can utilize this resource to track the vendor's security advisories over time, gain a deeper understanding of specific weakness classes and their exploitation patterns, or look up a detailed history of vulnerabilities for the Advanced iFrame product. The data includes publicly disclosed vulnerabilities that highlight issues such as cross-site scripting, injection flaws, and improper access control mechanisms. By centralizing these records, the page serves as a factual reference for security researchers, developers, and IT administrators seeking to assess the risk landscape of this specific technology. It does not provide proprietary or unpublished information but relies on established public databases and vendor notifications. This aggregated view helps stakeholders identify trends, prioritize remediation efforts, and compare the security posture of the Advanced iFrame against industry standards. The information presented is intended for educational and defensive purposes, enabling users to make informed decisions about patching, configuration changes, or alternative solutions. All entries are sourced from verified public records to ensure accuracy and reliability. This resource complements individual vulnerability details by providing a broader context of security issues affecting the product ecosystem.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-6742 Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute CWE-79 6.4 Medium2026-07-08
CVE-2026-25453 WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-02-19
CVE-2025-8089 Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 5.4 Medium2025-08-16
CVE-2025-6987 Advanced iFrame <= 2025.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-07-26
CVE-2025-1440 Advanced iFrame <= 2024.5 - Unauthenticated Settings Update CWE-20 5.3 Medium2025-03-26
CVE-2025-1437 Advanced iFrame <= 2025.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-03-26
CVE-2025-1439 Advanced iFrame <= 2024.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Host Header CWE-79 6.4 Medium2025-03-26
CVE-2024-4365 Advanced iFrame <= 2024.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-23
CVE-2024-32079 WordPress Advanced iFrame plugin <= 2024.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-04-15
CVE-2024-1341 Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 4.9 Medium2024-02-29
CVE-2024-24870 WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2024-02-05
CVE-2023-51690 WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2024-02-01
CVE-2023-7069 Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-02-01
CVE-2023-4775 Advanced iFrame <= 2023.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2023-11-13
CVE-2021-24953 Advanced iFrame < 2022 - Reflected Cross-Site Scripting CWE-79 6.1 -2022-03-07

All 15 known CVE vulnerabilities affecting Advanced iFrame with full Chinese analysis, references, and POCs where available.