Vulnerabilities > WP Webhooks

DATE CVE VULNERABILITY TITLE RISK
2023-08-30 CVE-2023-4599 Unspecified vulnerability in Wp-Webhooks Email Encoder
The Slimstat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
wp-webhooks
5.4
2021-09-06 CVE-2021-24599 Cross-site Scripting vulnerability in Wp-Webhooks Email Encoder
The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.
network
low complexity
wp-webhooks CWE-79
6.1