CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Patchstack•added 2026/06/24 1:12 p.m.•13 views

WordPress Email JavaScript Cloak plugin <= 1.03 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin Email JavaScript Cloak versions = 1.03...

7.2CVSS5.8AI score0.00256EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2026/06/24 5:33 a.m.•39 views

CVE-2026-10091 Email JavaScript Cloak <= 1.03 - Unauthenticated Stored Cross-Site Scripting

The Email JavaScript Cloak plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email' shortcode in all versions up to, and including, 1.03 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

7.2CVSS0.00256EPSS

SaveExploits0References3

CVE•added 2026/06/24 5:33 a.m.•17 views

CVE-2026-10091

The CVE-2026-10091 entry concerns the WordPress Email JavaScript Cloak plugin (

7.2CVSS6AI score0.00256EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by