CVE-2026-10091 | cgarvey Email JavaScript Cloak Plugin up to 1.03 on WordPress Shortcode cross site scripting

June 24, 2026 Yanac

A vulnerability classified as problematic was found in cgarvey Email JavaScript Cloak Plugin up to 1.03 on WordPress. The affected element is an unknown function of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-10091. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More