WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress

Add subscription forms on the website and send newsletters & automatically send post notification about new blog posts once it gets published.

42Reported vulnerabilities
9.8Highest CVSS score
5.9.33Latest version
50,000+Active installs

What to do now

Update Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress to 5.9.34 or later. 42 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 6, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2019-20361 Critical 9.8 85.1% Before 4.3.1 4.3.1 January 8, 2020
CVE-2024-2876 Critical 9.8 80.6% 0 to 5.7.14 (inclusive) 5.7.15 May 2, 2024
CVE-2019-19985 Medium 5.3 71.4% Before 4.2.3 4.2.3 December 26, 2019
CVE-2022-0439 High 8.8 4.2% Before 5.3.2 5.3.2 March 7, 2022
CVE-2024-4295 Critical 9.8 10.2% Before 5.7.21 5.7.21 June 5, 2024
CVE-2018-6015 High 7.5 3.2% Before 3.4.8 3.4.8 January 26, 2018
CVE-2019-13569 Critical 9.8 3.7% 4.1.7 and earlier 4.1.8 July 19, 2019
CVE-2024-12311 Medium 6.5 0.6% Before 5.7.44 5.7.44 January 6, 2025
CVE-2020-5767 Medium 6.5 0.9% 4.4.8 to 4.4.8 (inclusive) 4.5.1 July 17, 2020
CVE-2019-19984 Medium 6.3 1.0% Before 4.2.3 4.2.3 December 26, 2019
CVE-2024-6172 Critical 9.8 1.1% Before 5.7.26 5.7.26 July 2, 2024
CVE-2024-5756 Critical 9.8 0.7% Before 5.7.24 5.7.24 June 21, 2024
CVE-2022-45810 Critical 9.8 0.6% 5.5.2 and earlier 5.5.3 November 7, 2023
CVE-2020-5780 Medium 5.3 1.6% Before 4.5.6 4.5.6 September 10, 2020
CVE-2019-19982 Medium 5.3 1.2% Before 4.2.3 4.2.3 December 26, 2019
CVE-2020-5768 Medium 4.9 2.0% 4.4.8 to 4.4.8 (inclusive) 4.5.1 July 17, 2020
CVE-2019-19981 Medium 5.4 0.6% Before 4.2.3 4.2.3 December 26, 2019
CVE-2024-12568 Medium 4.8 0.3% Before 5.7.45 5.7.45 January 13, 2025
CVE-2024-12567 Medium 4.8 0.3% Before 5.7.45 5.7.45 January 13, 2025
CVE-2024-12566 Medium 4.8 0.3% Before 5.7.45 5.7.45 January 13, 2025
CVE-2024-11636 Medium 4.8 0.3% Before 5.7.45 5.7.45 January 13, 2025
CVE-2024-4845 High 8.8 0.5% Before 5.7.23 5.7.23 June 12, 2024
CVE-2024-4010 High 8.8 0.4% 0 to 5.7.19 (inclusive)
0 to 5.7.19 (inclusive)		 5.7.20 May 15, 2024
CVE-2022-3981 High 8.8 0.7% Before 5.5.1 5.5.1 December 12, 2022
CVE-2019-19980 Medium 4.3 1.0% Before 4.2.3 4.2.3 December 26, 2019
CVE-2023-5414 High 7.2 1.0% 5.6.23 and earlier 5.6.24 October 20, 2023
CVE-2026-81290 High 7.2 0.2% 5.9.33 and earlier 5.9.34 August 27, 2026
CVE-2025-66055 Medium 6.6 0.4% 5.9.10 and earlier 5.9.11 November 8, 2025
CVE-2026-1651 Medium 6.5 0.4% 0 to 5.9.16 (inclusive) 5.9.17 March 4, 2026
CVE-2019-14364 Medium 6.1 1.3% 4.1.6 to 4.1.6 (inclusive) 4.1.7 July 28, 2019
CVE-2018-0602 Medium 6.1 1.2% 3.4.12 and earlier 3.5.0 May 28, 2018
CVE-2024-8254 Medium 6.3 0.5% Before 5.7.35 5.7.35 October 2, 2024
CVE-2024-22300 Medium 6.1 0.4% 5.7.11 and earlier 5.7.12 March 26, 2024
WF-01d19333-d315-4715-8365-719260ae0ee4 Medium 6.1 — Before 2.9.1 2.9.1 August 10, 2015
CVE-2025-12348 Medium 5.3 0.4% 0 to 5.9.10 (inclusive) 5.9.11 December 12, 2025
CVE-2025-12349 Medium 5.3 0.3% 0 to 5.9.10 (inclusive) 5.9.11 November 19, 2025
CVE-2024-31352 Medium 5.3 0.4% 5.7.13 and earlier 5.7.14 April 5, 2024
CVE-2024-2656 Medium 4.4 0.4% 0 to 5.7.15 (inclusive) 5.7.16 April 6, 2024
CVE-2026-11592 Medium 4.3 0.5% 0 to 5.9.27 (inclusive) 5.9.28 July 2, 2026
CVE-2024-8771 Medium 4.3 0.4% Before 5.7.35 5.7.35 September 26, 2024
CVE-2024-5703 Medium 4.3 0.4% Before 5.7.27 5.7.27 July 17, 2024
CVE-2024-3626 Medium 4.3 0.4% 0 to 5.7.17 (inclusive) 5.7.18 May 23, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.