Software intelligence
Important: Email Subscribers appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
43
Latest advisory
1 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
email-subscribers
Plugin
This catalog lists 43 known advisories affecting Email Subscribers. The most recent was published on 1 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Email Subscribers & Newsletters <= 5.9.27 - Missing Authorization to Authenticated (Contributor+) Settings Modification via ig_es_handle_request AJAX Action
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 1 July 2026
Email Subscribers & Newsletters <= 5.9.16 - Authenticated (Administrator+) SQL Injection via 'workflow_ids' Parameter
May allow attackers to read or modify database contents beyond intended access.
Published 3 March 2026
Email Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 11 December 2025
Known Email Subscribers advisories published by month.
CVE-2020-5768 · Published 16 July 2020
Affected versions: < 4.5.1
CVE-2020-5767 · Published 13 July 2020
Affected versions: < 4.5.1
CVE-2019-19982 · Published 13 November 2019
Affected versions: ≤ 4.2.2
CVE-2019-19980 · Published 13 November 2019
Affected versions: ≤ 4.2.2
CVE-2019-19984 · Published 13 November 2019
Affected versions: ≤ 4.2.2
CVE-2019-19985 · Published 13 November 2019
Affected versions: ≤ 4.2.2
CVE-2019-20361 · Published 13 November 2019
Affected versions: ≤ 4.3.0
CVE-2019-19981 · Published 13 November 2019
Affected versions: ≤ 4.2.2
CVE-2019-13569 · Published 22 July 2019
Affected versions: ≤ 4.1.7
CVE-2019-14364 · Published 12 July 2019
Affected versions: ≤ 4.1.6
CVE-2018-0602 · Published 28 May 2018
Affected versions: ≤ 3.4.12
CVE-2018-6015 · Published 24 January 2018
Affected versions: ≤ 3.4.7
No CVE assigned · Published 10 August 2015
Affected versions: < 2.9.1
SiteRespond Defence matches your installed Email Subscribers version against this catalog when the Defence plugin is connected to your WordPress site.