CVE-2024-4483

MEDIUM 5.4CVE-2024-4483 · Published 29/07/2024 · updated 17/06/2026

In short

CVE-2024-4483 is a MEDIUM (CVSS 5.4) vulnerability affecting email encoder (wp-webhooks).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 31.9% of all vulnerabilities.
Fix: update to 2.2.2 or later.

Package	Affected versions	Patched versions
email encoder wp-webhooks	`< 2.2.2`	`2.2.2`

Description

The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting

References

wpscan.com/vulnerability/8f2ac76c-f3f8-41f9-a32a-f414825cf6f1 · Exploit

More vulnerabilities in email encoder

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free