Download After Email – Subscribe & Download Form Plugin
Download After Email – Subscribe & Download Form Plugin has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Uncontrolled Resource Consumption.
Every one of the 2 issues recorded for Download After Email – Subscribe & Download Form Plugin has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Download After Email – Subscribe & Download Form Plugin is installed on roughly 7,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2026-24541Download After Email <= 2.1.9 - Missing Authorization
Read the full analysisVulnerability Records

Download After Email – Subscribe & Download Form Plugin
Author
mkscripts
Download After Email is a free Subscribe & Download plugin that allows you to gain subscribers by offering free downloads. Subscribe & Download Form Creating a new subscribe & download form is pretty much the same as creating a new post or page, only with some extra options. If you are satisfied with the preview you can save the form and place the generated shortcode on a page, post or widget. It is possible to create multiple subscribe & download forms. Enter Email Before Download A visitor must enter his email address before the download link will be sent via email. For the secured download links, a limit type can be set such as one-time, unlimited or time-based and the download process is protected against unauthorized use. You can choose whether to send an email notification and to which email address it should be sent. Responsive & Highly Customizable The Ajax-based opt-in form is fully responsive and adapts to the space around the form and to the screen. There are many options available to customize the layout of the subscribe & download form and to adjust the text for all notifications including the email that is sent with the download link. It is possible to use HTML and images for the email content. “From Email” and “From Name” can be set. GDPR Ready Download After Email offers all necessary tools to let you comply with the GDPR. You can enable a required checkbox and a optional checkbox. The text of the checkboxes can be adjusted. In the background, data is stored such as IP address, form content, time etc. The use of the download link functions as double opt-in. Hooks & Filters Hooks and filters are available for developers to make adjustments or implement extensions. For example, you can write your own HTML code for the subscribe & download form field(s) or for the email that is sent to the subscriber. Or you could add new actions after a download link has been sent and after a download link has been used. Add Premium Features Download After Email Plus is an extension/add-on that adds the following premium features: Create and manage your own form fields with the Drag & Drop Form Builder. Export subscriber data to a CSV-file and use it for email marketing, newsletters etc. Integration with Mailchimp. Automatically add new subscribers to your Mailchimp audience. Visit our website for more information: https://www.download-after-email.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C