https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:55:43.893695+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-2572 EUVD-2026-2572 2026-10-05T23:55:43.897128+00:00 EUVD-2026-2572 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4483 fkie_cve-2024-4483 2026-10-05T23:55:43.897174+00:00

The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting

 https://cve.radiocsirt.org/vuln/ghsa-w3pw-m4q2-x98m GHSA-w3pw-m4q2-x98m 2026-10-05T23:55:43.897232+00:00

The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting