Software intelligence
Important: Advanced Iframe appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
13
Latest advisory
7 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
advanced-iframe
Plugin
This catalog lists 13 known advisories affecting Advanced Iframe. The most recent was published on 7 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Advanced iFrame <= 2026.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block 'additional' Attribute
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 7 July 2026
Advanced iFrame <= 2025.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 19 January 2026
Advanced iFrame <= 2025.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 15 August 2025
Known Advanced Iframe advisories published by month.
CVE-2026-6742 · Published 7 July 2026
Affected versions: ≤ 2026.1
CVE-2026-25453 · Published 19 January 2026
Affected versions: ≤ 2025.10
CVE-2025-8089 · Published 15 August 2025
Affected versions: ≤ 2025.6
CVE-2025-6987 · Published 25 July 2025
Affected versions: ≤ 2025.5
CVE-2025-1439 · Published 25 March 2025
Affected versions: ≤ 2024.5
CVE-2025-1437 · Published 25 March 2025
Affected versions: ≤ 2025.2
CVE-2025-1440 · Published 25 March 2025
Affected versions: ≤ 2024.5
CVE-2024-4365 · Published 22 May 2024
Affected versions: ≤ 2024.3
CVE-2024-32079 · Published 11 April 2024
Affected versions: ≤ 2024.2
CVE-2024-1341 · Published 28 February 2024
Affected versions: ≤ 2024.1
CVE-2023-7069 · Published 31 January 2024
Affected versions: ≤ 2023.10
CVE-2023-4775 · Published 9 November 2023
Affected versions: ≤ 2023.8
CVE-2021-24953 · Published 2 February 2022
Affected versions: ≤ 2021.9
SiteRespond Defence matches your installed Advanced Iframe version against this catalog when the Defence plugin is connected to your WordPress site.