medium6.1
CVE-2026-5776
The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored …
Impact
The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks
Affected products
| Product | Affected versions |
|---|---|
| Email Encoder WordPress Plugin | before 2.4.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.