Cloak Front End Email

Cloak Front End Email has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Cloak Front End Email has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Cloak Front End Email vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-0150

Cloak Front End Email <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

2 records


2025-04-17 00:00	Cloak Front End Email <= 1.9.5 - Missing Authorization Cloak Front End Email <= 1.9.5	`CVE-2025-26968`	5.3 Medium	Muhammad Yudha - DJ	Yes
2023-01-11 00:00	Cloak Front End Email <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Cloak Front End Email <= 1.9.1	`CVE-2023-0150`	6.4 Medium	István Márton	Yes

Showing 1–2 of 2 reports