Vulnerabilities > Jannisthuemmig
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-29 | CVE-2024-1282 | Unspecified vulnerability in Jannisthuemmig Email Encoder The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2024-01-11 | CVE-2023-7070 | Cross-site Scripting vulnerability in Jannisthuemmig Email Encoder 2.1.8/2.1.9 The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's eeb_mailto shortcode in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. | 5.4 |
| 2023-11-22 | CVE-2023-47821 | Cross-site Scripting vulnerability in Jannisthuemmig Email Encoder 2.1.8 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jannis Thuemmig Email Encoder plugin <= 2.1.8 versions. | 5.4 |