TI-2026-08845 CVE-2026-10091 · GHSA-j79v-p5cw-7gp5
Email JavaScript Cloak <= 1.03 - Unauthenticated Stored Cross-Site Scripting
Priority LOW 32
The Email JavaScript Cloak plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email' shortcode in all versions up to, and including, 1.03 due to insufficient input sanitization and output…