A vulnerability classified as problematic was found in onlineoptimisation Email Encoder Plugin up to 2.4.4 on WordPress. The affected element is the function
eeb_mailto. The manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2026-2840. The attack may be launched remotely. There is no exploit available.