Skip to content
OpenAdvisories

Vendor

onlineoptimisation

5 known vulnerabilities.

Products

Email Encoder – Protect Email Addresses and Phone Numbers 4 WP Mailto Links – Protect Email Addresses 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-2840

    Email Encoder – Protect Email Addresses and Phone Numbers <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via eeb_mailto Shortcode

    The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in all versions up to, and including, 2.4.4 due to insufficient input sanitization and output escapi…

    onlineoptimisation Email Encoder – Protect Email Addresses and Phone Numbers Web / CMS
  • Medium 6.4
    CVE-2024-1282

    Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escapin…

    onlineoptimisation Email Encoder – Protect Email Addresses and Phone Numbers Web / CMS
  • Medium 6.4
    CVE-2023-7070

    Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's eeb_mailto shortcode in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output…

    onlineoptimisation Email Encoder – Protect Email Addresses and Phone Numbers Web / CMS
  • Medium 6.4
    CVE-2023-5109

    WP Mailto Links – Protect Email Addresses <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpml_mailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping on user supplied att…

    onlineoptimisation WP Mailto Links – Protect Email Addresses Web / CMS
  • Medium 6.4
    CVE-2023-4599

    Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it po…

    onlineoptimisation Email Encoder – Protect Email Addresses and Phone Numbers Web / CMS