CyberRota
Back to database

CVE-2026-5306

MEDIUM · CVSS 5.4 EPSS 0.05%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-28 · Last synced: 2026-05-28

CyberRota Analysis

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-5306
Severity
MEDIUM
CVSS
5.4
EPSS
0.05%
WordPress

Original NVD Description

The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks when the email encoder setting is enabled