Read the docs

onlineoptimisation

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

onlineoptimisation records in CISA KEV

No onlineoptimisation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Encoder 3 records LOW

Records

7 records

TI-2024-01192 CVE-2024-1282 · GHSA-h5w5-6jp4-mjpj

Cross-site scripting in onlineoptimisation Email Encoder – Protect Email Addresses and…

Priority LOW 29

The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.2.0 due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00443 Published 2024-02-20 No fix listed CWE-79
TI-2023-06466 CVE-2023-7070 · GHSA-xvpc-whww-6cvw

Cross-site scripting in onlineoptimisation Email Encoder – Protect Email Addresses and…

Priority LOW 29

The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's eeb_mailto shortcode in all versions up to, and including, 2.1.9 due to ins…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.004 Published 2024-01-11 No fix listed CWE-79
TI-2023-04698 CVE-2023-5109 · GHSA-fq8c-93h2-hrr9

Cross-site scripting in onlineoptimisation WP Mailto Links – Protect Email Addresses

Priority LOW 29

The WP Mailto Links – Protect Email Addresses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wpml_mailto' shortcode in versions up to, and including, 3.1.3 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00485 Published 2023-10-20 No fix listed CWE-79
TI-2023-04243 CVE-2023-4599 · GHSA-76p2-85pf-cqf5

Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The Email Encoder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on use…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00519 Published 2023-08-30 No fix listed CWE-79
TI-2026-02439 CVE-2026-2840 · GHSA-6f47-h5cp-7cwm

Cross-site scripting in onlineoptimisation Email Encoder – Protect Email Addresses and…

Priority LOW 28

The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in all versions up to, and including, 2.4.4 due to insufficie…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00257 Published 2026-04-16 No fix listed CWE-79
TI-2025-33409 CVE-2025-53464 · GHSA-hm9v-9h2m-r8qq

WordPress WP Mailto Links Plugin <= 3.1.4 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Online Optimisation WP Mailto Links wp-mailto-links allows Stored XSS.This issue affects WP Mailto Links: from n/a thr…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00296 Published 2025-09-22 No fix listed CWE-79
Open these records in search →