Custom iFrame – Embed PDFs, Videos, and External Content in WordPress (Elementor & Gutenberg)

Vulnerabilities 1Slug custom-iframeLatest version 2.0.3WordPress.org →

Minimum safe version

1.0.14

Update to 1.0.14 or later to address 1 fixable vulnerability

Latest available2.0.3 ✓
Medium 6.5
2025-09-22< 1.0.14

WordPress Custom iFrame for Elementor Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)

PatchstackWordfenceEUVDCVE