Malicious Redirect Vulnerability in elink – Embed Content Plugin for WordPress

CVE-2025-7507

What is CVE-2025-7507?

The elink – Embed Content plugin for WordPress contains a vulnerability that allows authenticated attackers with Contributor-level access or higher to exploit the elink shortcode. By providing a crafted HTML file, these attackers can redirect users to a malicious domain. This issue impacts all versions of the plugin up to and including 1.1.0, highlighting the need for users to carefully manage plugin permissions and update to secure versions promptly.

References