Email Encoder (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-20. Vendor: Unknown.

CVEs of Email Encoder

• CVE-2026-5776 - CVSS 6.1 (medium), 2026-05-20: The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored…
• CVE-2024-7083 - CVSS 3.5 (low), 2026-04-20: The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2024-4483 - CVSS 5.4 (medium), 2024-07-29: The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an…