CVE-2023-4599

CVE-2023-4599 affects the Slimstat Analytics WordPress plugin. It is a stored XSS via the eeb_mailto shortcode caused by insufficient input sanitization and output escaping. Exploitation requires an authenticated attacker with contributor-level permissions or higher, who can inject scripts that e...

CVE-2024-4483

CVE-2024-4483 affects the Email Encoder WordPress plugin prior to 2.2.2. The vulnerability is a Stored XSS where the parameter WP_Email_Encoder_Bundle_options[protection_text] is not escaped before output in an admin page attribute, enabling potentially malicious input to be stored and reflected....

CVE-2021-24599

The CVE-2021-24599 entry concerns the WordPress plugin Email Encoder – Protect Email Addresses, affected in versions before 2.1.2. The vulnerability is an unauthenticated endpoint that renders a user-supplied value in the HTML response without escaping or sanitizing, leading to a reflected cross-...