Wiki Embed
Wiki Embed has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Wiki Embed has a vendor fix available, so running the current release closes it.
All of these findings were reported by Chu The Anh. Wiki Embed is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.3.2.
CVE-2025-47551Wiki Embed <= 1.4.6 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Wiki Embed
Author
ctltwp
This plugin will pull content from any Media Wiki website (Such as wikipedia.org). It strips and reformats the content, allowing you to supply some arguments to dictate how this works. How does it work? On your WordPress page or post. You embed a shortcode, something like [wiki-embed url='http://en.wikipedia.org/wiki/WordPress' tabs no-contents no-infobox ] Once you save the page you will have the content of the wiki embed into you page. Kind of like a youtube video. Only the page will look like as if it is part of your site. Any changes that are made on the wiki will be reflected on your site, once the cache has expired and a new version of the page is requested from the wiki. Why would you want to do that? You can build a better navigation structure to your site, while crowd sourcing the content of the pages inside the wiki. Win Win. ** Where can I get more info?** Checkout our Support page http://support.cms.ubc.ca/cms-manual/adding-content/embedding-content-from-the-ubc-wiki/ that is using the wiki-embed plugin to grab content from our [wiki http://wiki.ubc.ca/Documentation:UBC_Content_Management_System/CLF_Theme/How_to_embed_content_from_the_UBC_Wiki Usage Wiki Embed is implemented using the shortcode [wiki-embed]. It accepts the following arguments: * url: (required) the web address of the wiki article that you want to embed on this page. * no-edit: Hide the “edit” links from the wiki. * no-contents: Hide the page’s contents box. * no-infobox: Hide any infobox that appears on the wiki for this page. * tabs: Replaces the sections of the wiki article with tabs. * accordion: Replaces the sections of the wiki article with an accordian. This option cannot be used as the same time as ‘tabs’. Example; [wiki-embed url=”http://en.wikipedia.org/wiki/Example” no-edit no-contents no-infobox accordion] Configuration Settings for the plugin can be found in ‘Wiki Embed’ -> ‘Settings’. Here you can enable/disable various features, define shortcode defaults, and configure some global settings for the plugin.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C