Boletines de Vulnerabilidades

CVE-2026-5776

   
Software afectado WORDPRESS
 
The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-5776