EUVD-2023-57448

Malicious code in bioql PyPI...

CVE-2025-53464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a through = 3.1.4...

PT-2025-39000

Name of the Vulnerable Software and Affected Versions Ironikus WP Mailto Links versions through 3.1.4 Description The software contains a flaw related to improper handling of user-supplied data when creating web pages, leading to a potential Cross-site Scripting XSS issue. This specific instance...

CVE-2023-5109

The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpmlmailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2023-5109

The CVE-2023-5109 entry concerns the WP Mailto Links – Protect Email Addresses WordPress plugin. Affected versions up to 3.1.3 are vulnerable to Stored XSS via the wpml_mailto shortcode due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticat...

WP Mailto Links – Protect Email Addresses < 3.1.4 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

WordPress Plugin WP Mailto Links - Protect Email Addresses Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress WP Mailto Links Plugin <= 3.1.3 is vulnerable to Cross Site Scripting (XSS)

Software WP Mailto Links Type Plugin Vulnerable versions = 3.1.3 Fixed in 3.1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5109 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 3d653ce832da Credits Lana Codes Required...