Benchmark Email Lite

Benchmark Email Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Benchmark Email Lite has a vendor fix available, so running the current release closes it.

All of these findings were reported by Joshua Chan. Benchmark Email Lite is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Benchmark Email Lite vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-31360

Benchmark Email Lite <= 4.1 - Cross-Site Request Forgery via page_settings()

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv4.3.1

Benchmark Email Lite

beAutomated

Author

beAutomated

4.0(3)
80/100
Last Updated
2025-11-29 (10mo ago)
Active Installs
1,000+
Downloads
133,584
Requires WP
4.9+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2011-05-12 (16y ago)

What is Benchmark Email Lite? Benchmark Email Lite is a WordPress plugin that saves you time by giving you access to your email marketing account directly in your WordPress dashboard. Easily convert blog posts into email campaigns to increase the reach of your content Turn site visitors into subscribers by creating signup forms and pop-up modals that will automatically adapt to your WordPress theme Streamline your workflows by creating and scheduling any email campaign directly from your WordPress dashboard Send More Targeted Email Campaigns with Website Tracking When you install Benchmark Email Lite on your WordPress site, it will automatically install the Automation Pro website tracker. Follow-up with email campaigns based on the products, services or content that subscribers viewed on your website Boost your sales by automating emails that further convince a subscriber of the value of a product or service they showed interest in by visiting a page on your site A site visitor viewing a specific page can trigger an email with additional information on a product or service Access Your Whole Email Marketing Account from Your WordPress Dashboard Say goodbye to at least one extra tab on your browser. Discover the blog content that is most popular with your subscribers by viewing your open and click reports directly in your WordPress dashboard—then create more content just like it! Create content and promote it all from the same place Easily Grow Your Most Valuable Marketing Asset: Your Email List No coding necessary! With the Benchmark Email Lite plugin, you can quickly and easily place a signup form anywhere you want on your site. It’s also super simple to customize your forms.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C