← Back

Mmilan81

mmilan81

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mm Email2image
mm-email2image
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-3076
1Mmilan81
1Mm Email2image
Jun 17, 2026
Apr 26, 2024
N/A· v4
3.8 LOW· v3
N/A· v2
The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via...Show more
The MM-email2image WordPress plugin through 0.2.5 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attackShow less
CVE-2024-3075
1Mmilan81
1Mm Email2image
Jun 17, 2026
Apr 26, 2024
N/A· v4
8.1 HIGH· v3
N/A· v2
The MM-email2image WordPress plugin through 0.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co...Show more
The MM-email2image WordPress plugin through 0.2.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksShow less