Veille CVE

Recherche « Unknown Email Encoder »

3 CVE

  1. CVE-2026-5305 8.8 Élevée

    Unknown Email Address Encoder · Unknown email-encoder-premium

    The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks

  2. CVE-2026-5776 6.1 Moyenne

    Unknown Email Encoder

    The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks

  3. CVE-2026-5306 5.4 Moyenne

    Unknown Check & Log Email

    The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled