CVE-2024-4483

The Email Encoder WordPress plugin versions prior to 2.2.2 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before it is outputted back into an attribute on an admin page. This allo...

CVE-2021-24599

The CVE-2021-24599 entry concerns the WordPress plugin Email Encoder – Protect Email Addresses, affected in versions before 2.1.2. The vulnerability is an unauthenticated endpoint that renders a user-supplied value in the HTML response without escaping or sanitizing, leading to a reflected cross-...