CVE-2024-1282

CVE-2024-1282 refers to the WordPress plugin “Email Encoder – Protect Email Addresses and Phone Numbers.” The vulnerability is a Stored Cross-Site Scripting (XSS) in which attacker-supplied attributes in the plugin’s shortcode can inject scripts. Affected versions are all until and including 2.2....

CVE-2023-47821

CVE-2023-47821 affects the WordPress Email Encoder Bundle plugin (

CVE-2023-7070

CVE-2023-7070 affects the Email Encoder – Protect Email Addresses and Phone Numbers WordPress plugin. All versions up to and including 2.1.9 are vulnerable to Stored XSS via the eeb_mailto shortcode due to insufficient input sanitization and output escaping on user-supplied attributes, enabling a...