https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-4483.htmlhttps://patchthecve.com/cve/CVE-2024-4483.htmlWed, 17 Jun 2026 08:01:58 +0000MEDIUM 5.4: The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scriptinghttps://patchthecve.com/cve/CVE-2024-1282.htmlhttps://patchthecve.com/cve/CVE-2024-1282.htmlWed, 22 Jul 2026 12:56:52 +0000MEDIUM 6.4: The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makeshttps://patchthecve.com/cve/CVE-2023-7070.htmlhttps://patchthecve.com/cve/CVE-2023-7070.htmlWed, 22 Jul 2026 12:56:52 +0000MEDIUM 6.4: The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's eeb_mailto shortcode in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. Thhttps://patchthecve.com/cve/CVE-2023-47821.htmlhttps://patchthecve.com/cve/CVE-2023-47821.htmlWed, 22 Jul 2026 12:56:52 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jannis Thuemmig Email Encoder plugin <= 2.1.8 versions.https://patchthecve.com/cve/CVE-2023-4599.htmlhttps://patchthecve.com/cve/CVE-2023-4599.htmlWed, 17 Jun 2026 06:38:11 +0000MEDIUM 6.4: The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with c