Email Encoder – Protect Email Addresses and Phone Numbers, CVE-2026-5776

CVE, Research URL: CVE-2026-5776
Home page URL: Security reports for Email Encoder – Protect Email Addresses and Phone Numbers
Application: Email Encoder – Protect Email Addresses and Phone Numbers
Published on: May 20, 2026
Research Description: The Email Encoder WordPress plugin before 2.4.7 does not escape email addresses retrieved via user input, allowing unauthenticated attackers to perform Stored XSS attacks
Affected versions: max 2.4.7.
Status: vulnerable

Email Encoder &#8211; Protect Email Addresses and Phone Numbers, CVE-2026-5776