Software intelligence
Important: Email Subscribers appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
43
Latest advisory
1 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
email-subscribers
Plugin
This catalog lists 43 known advisories affecting Email Subscribers. The most recent was published on 1 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 1 July 2026
Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter
May allow attackers to read or modify database contents beyond intended access.
Published 3 March 2026
Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 11 December 2025
Known Email Subscribers advisories published by month.
CVE-2024-6172 · Published 1 July 2024
Affected versions: ≤ 5.7.25
CVE-2024-5756 · Published 20 June 2024
Affected versions: ≤ 5.7.23
CVE-2024-4845 · Published 11 June 2024
Affected versions: ≤ 5.7.22
CVE-2024-4295 · Published 4 June 2024
Affected versions: ≤ 5.7.20
CVE-2024-3626 · Published 22 May 2024
Affected versions: ≤ 5.7.17
CVE-2024-4010 · Published 14 May 2024
Affected versions: ≤ 5.7.19
CVE-2024-2876 · Published 15 April 2024
Affected versions: ≤ 5.7.14
CVE-2024-2656 · Published 5 April 2024
Affected versions: ≤ 5.7.15
CVE-2024-31352 · Published 5 April 2024
Affected versions: ≤ 5.7.13
CVE-2024-22300 · Published 26 March 2024
Affected versions: ≤ 5.7.11
CVE-2023-5414 · Published 11 October 2023
Affected versions: ≤ 5.6.23
CVE-2022-45810 · Published 6 February 2023
Affected versions: ≤ 5.5.2
CVE-2022-3981 · Published 21 November 2022
Affected versions: ≤ 5.4.19
CVE-2022-0439 · Published 11 February 2022
Affected versions: < 5.3.2
CVE-2020-5780 · Published 9 September 2020
Affected versions: < 4.5.6
SiteRespond Defence matches your installed Email Subscribers version against this catalog when the Defence plugin is connected to your WordPress site.