CVE-2024-4483

The Email Encoder WordPress plugin before 2.2.2 does not escape the WPEmailEncoderBundleoptionsprotectiontext parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting...

Email Encoder Bundle <= 1.4.1 - Unauthenticated Cross-Site Scripting (XSS)

The Email Encoder – Protect Email Addresses WordPress plugin was affected by an Unauthenticated Cross-Site Scripting XSS security vulnerability...