Extension WordPress
Vulnérabilités Email Encoder – Protect Email Addresses and Phone Numbers
Cette page rassemble les failles publiées pour Email Encoder – Protect Email Addresses and Phone Numbers, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Email Encoder – Protect Email Addresses and Phone Numbers
10 fiches
Email Encoder – Protect Email Addresses and Phone Numbers < 2.4.7 – Unauthenticated Stored Cross-Site Scripting
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
[*, 2.4.7)
2.4.7
11/06/2026
Email Encoder – Protect Email Addresses and Phone Numbers < 2.3.4 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
[*, 2.3.4)
2.3.4
21/04/2026
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.4.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via eeb_mailto Shortcode
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output…
*-2.4.4
2.4.5
15/04/2026
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.1 – Authenticated (Admin+) Stored Cross-Site Scripting
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'WP_Email_Encoder_Bundle_options[protection_text]' parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output…
*-2.2.1
2.2.2
08/07/2024
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output…
*-2.2.0
2.2.1
13/02/2024
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's eeb_mailto shortcode in all versions up to, and including, 2.1.9 due to insufficient input sanitization and…
*-2.1.9
2.1.10
09/01/2024
Email Encoder Bundle <= 2.1.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output…
*-2.1.8
2.1.9
15/11/2023
Email Encoder <= 2.1.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
*-2.1.8
2.1.9
29/08/2023
Email Encoder <= 2.1.1 – Reflected Cross Site Scripting
The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.
*-2.1.1
2.1.2
02/08/2021
Email Encoder < 1.4.2 – Cross-Site Scripting
The Email Encoder plugin for WordPress is vulnerable to Cross-Site Scripting via 'email' and 'display' parameters in versions before 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
[*, 1.4.2)
1.4.2
10/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.