Sign in Free assessment

onlineoptimisation records

3 published records for vendor onlineoptimisation.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 33.3%
Median publish → KEV: No record has entered KEV

Records by year

23
24

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3

The weakness classes this vendor ships most often: where to look.

Attack profile

XSS 3

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2024-1282No exploit	Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeonlineoptimisation · email encoder · CWE-79 XSS	Medium5.4	—	0.4%	Feb 28, 2024
21Monitor	CVE-2023-47821No exploit	WordPress Email Encoder Bundle Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)onlineoptimisation · email encoder · CWE-79 XSS	Medium5.4	—	0.4%	Nov 22, 2023
21Monitor	CVE-2023-7070No exploit	Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingonlineoptimisation · email encoder · CWE-79 XSS	Medium5.4	—	0.4%	Jan 11, 2024

CVE-2024-1282
21Monitor
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
onlineoptimisation · email encoderFeb 28, 2024
CVE-2023-47821
21Monitor
WordPress Email Encoder Bundle Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
onlineoptimisation · email encoderNov 22, 2023
CVE-2023-7070
21Monitor
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
onlineoptimisation · email encoderJan 11, 2024