Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:email_encoder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductEmail Encoder (50873300-d8ac-5191-b453-bea87874ec72)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5776 vulnerable 2026-06-08 08:07:04.079212 Email Encoder < 2.4.7 - Unauthenticated Stored XSS
The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks
Published: 2026-05-20T06:00:02.018Z
Updated: 2026-05-20T12:52:08.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7083 vulnerable 2026-06-08 06:58:21.202005 Email Encoder < 2.3.4 - Admin+ Stored XSS
The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2026-04-20T06:00:07.030Z
Updated: 2026-04-20T13:16:26.285Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4483 vulnerable 2026-06-08 06:50:17.844305 Email Encoder < 2.2.2 - Admin+ Stored XSS
The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting
Published: 2024-07-29T06:00:01.115Z
Updated: 2024-08-01T20:40:47.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.