CVE-2026-5305

The Email Address Encoder WordPress plugin (versions before 1.0.25 ) and the email-encoder-premium WordPress plugin (versions before 0.3.12 ) are vulnerable to Unauthenticated Stored XSS . The root cause is the improper handling of email replacement within these plugins. This flaw could allow an ...