WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Email Marketing Plugin – WP Email Capture

Double opt-in form for building your email list. Define landing pages to distribute your ebooks & software.

5Reported vulnerabilities
7.5Highest CVSS score
3.12.7Latest version
1,000+Active installs

What to do now

Update Email Marketing Plugin – WP Email Capture to 3.12.6 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: April 21, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-28421 High 7.5 0.5% Before 3.11 3.11 December 21, 2023
CVE-2023-23723 Medium 4.4 0.4% 3.9.3 and earlier 3.10 January 30, 2023
CVE-2025-68529 Medium 4.3 0.1% 3.12.5 and earlier 3.12.6 December 31, 2025
CVE-2025-67578 Medium 4.3 0.3% 3.12.4 and earlier 3.12.5 December 8, 2025
CVE-2023-23724 Medium 4.3 0.3% 3.9.3 and earlier 3.10 February 15, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.