Email Encoder Security Vulnerabilities and Issues — Email Encoder CVE List

Lucene search

Wp-webhooksEmail Encoder

3 matches found

CVE•added 2023/08/30 2:15 a.m.•88 views

CVE-2023-4599

The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers ...

6.4CVSS5.2AI score0.00093EPSS

CVE•added 2024/07/29 6:15 a.m.•39 views

CVE-2024-4483

The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting

5.4CVSS5.7AI score0.00069EPSS

CVE•added 2021/09/06 11:15 a.m.•34 views

CVE-2021-24599

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.

6.1CVSS6.3AI score0.00189EPSS