← Database

CVE-2026-5776

MEDIUM CVSS: 6.1 Published: 2026-05-20 Modified: 2026-07-24

Description

The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks

Affected Platforms

Unknown

Weakness Type

Unknown

References