Known vulnerabilities in the Email Subscribers plugin
23 security advisories have been published for the Email Subscribers plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Email Subscribers - Security Vulnerability (CVE-2026-12757) MEDIUM
- Email Subscribers - Cross-Site Scripting (XSS) (CVE-2026-81290) HIGH
- Email Subscribers - Broken Access Control (CVE-2026-11592) MEDIUM
- Email Subscribers - SQL Injection (CVE-2026-1651) MEDIUM
- Email Subscribers - Broken Access Control (CVE-2025-12348) MEDIUM
- Email Subscribers - PHP Object Injection (CVE-2025-66055) HIGH
- Email Subscribers - Security Vulnerability (CVE-2025-12349) MEDIUM
- Email Subscribers - Security Vulnerability (CVE-2024-8254) MEDIUM
- Email Subscribers - Broken Access Control (CVE-2024-8771) MEDIUM
- Email Subscribers - Broken Access Control (CVE-2024-5703) MEDIUM
- Email Subscribers - SQL Injection (CVE-2024-6172) CRITICAL
- Email Subscribers - SQL Injection (CVE-2024-5756) CRITICAL
- Email Subscribers - SQL Injection (CVE-2024-4845) HIGH
- Email Subscribers - SQL Injection (CVE-2024-4295) CRITICAL
- Email Subscribers - Broken Access Control (CVE-2024-3626) MEDIUM
- Email Subscribers - SQL Injection (CVE-2024-4010) HIGH
- Email Subscribers - SQL Injection (CVE-2024-2876) CRITICAL
- Email Subscribers - Cross-Site Scripting (XSS) (CVE-2024-2656) MEDIUM
- Email Subscribers - Path Traversal (CVE-2023-5414) CRITICAL
- Email Subscribers - Cross-Site Scripting (XSS) (CVE-2019-14364) MEDIUM
- Email Subscribers - SQL Injection (CVE-2019-13569) CRITICAL
- Email Subscribers - Cross-Site Scripting (XSS) (CVE-2018-0602) MEDIUM
- Email Subscribers - Security Vulnerability (CVE-2018-6015) HIGH