Embed Chessboard

Embed Chessboard has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Embed Chessboard has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Muhammad Yudha - DJ. Embed Chessboard is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Embed Chessboard vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-32177

Embed Chessboard <= 3.07.00 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-04-04 00:00	Embed Chessboard <= 3.07.00 - Authenticated (Contributor+) Stored Cross-Site Scripting Embed Chessboard <= 3.07.00	`CVE-2025-32177`	6.4 Medium	Muhammad Yudha - DJ	No

Showing 1–1 of 1 reports

Latestv3.09.00

Embed Chessboard

Author

pgn4web

4.0(3)

80/100

Last Updated

2026-07-22 (2mo ago)

Active Installs

600+

Downloads

47,190

Requires WP

2.9+

Requires PHP

Tested up to

WP 7.1

Created

2010-01-29 (17y ago)

Embed Chessboard is a plugin that allows for the insertion of a chessboard displaying chess games within worpress articles. Use following shortcode tag to insert a chessboard: [pgn parameter=value ...] ... chess games in PGN format ... [/pgn] Shortcode tag parameters: layout=horizontal|vertical height=auto|number showMoves=figurine|text|puzzle|hidden initialGame=first|last|random|number initialVariation=number initialHalfmove=start|end|random|comment|number autoplayMode=game|loop|none Example: [pgn height=500 initialHalfmove=16 autoplayMode=none] [Event "World championship"] [Site "Moscow URS"] [Date "1985.10.15"] [Round "16"] [White "Karpov"] [Black "Kasparov"] [Result "0-1"] 1. e4 c5 2. Nf3 e6 3. d4 cxd4 4. Nxd4 Nc6 5. Nb5 d6 6. c4 Nf6 7. N1c3 a6 8. Na3 d5 9. cxd5 exd5 10. exd5 Nb4 11. Be2 Bc5 12. O-O O-O 13. Bf3 Bf5 14. Bg5 Re8 15. Qd2 b5 16. Rad1 Nd3 17. Nab1 h6 18. Bh4 b4 19. Na4 Bd6 20. Bg3 Rc8 21. b3 g5 22. Bxd6 Qxd6 23. g3 Nd7 24. Bg2 Qf6 25. a3 a5 26. axb4 axb4 27. Qa2 Bg6 28. d6 g4 29. Qd2 Kg7 30. f3 Qxd6 31. fxg4 Qd4+ 32. Kh1 Nf6 33. Rf4 Ne4 34. Qxd3 Nf2+ 35. Rxf2 Bxd3 36. Rfd2 Qe3 37. Rxd3 Rc1 38. Nb2 Qf2 39. Nd2 Rxd1+ 40. Nxd1 Re1+ 0-1 [/pgn] When using the gutenberg editor, please add shortcodes as shortcodes blocks in guntenberg. Any PGN header tag missing will not be displayed. Note: HTML tags are stripped from the PGN data, removing all text between “<” and “>” characters; please make sure your PGN data does not contain “<” and “>” characters.

View on WordPress.org