← Database

CVE-2026-5305

HIGH CVSS: 8.8 Published: 2026-06-25 Modified: 2026-06-25

Description

The Email Address Encoder WordPress plugin before 1.0.25, email-encoder-premium WordPress plugin before 0.3.12 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks

Affected Platforms

Unknown

Weakness Type

Unknown

References