Elastic Email Subscribe Form

Elastic Email Subscribe Form has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Elastic Email Subscribe Form has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Hiro. Elastic Email Subscribe Form is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Elastic Email Subscribe Form vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-28985

Elastic Email Subscribe Form <= 1.2.2 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Elastic Email Subscribe Form banner
Latestv1.2.2

Elastic Email Subscribe Form

Elastic Email

Author

Elastic Email

4.5(4)
90/100
Last Updated
2021-10-27 (5y ago)
Active Installs
100+
Downloads
19,232
Requires WP
4.1+
Requires PHP
5.6+
Tested up to
WP 5.7.17
Created
2018-02-07 (9y ago)

Elastic Email Subscribe Form allows you to create and manage a beautiful widget for your WordPress blog or website. This easy to use, beautiful and powerful plugin will help you gather new subscribers and grow your business faster than ever! Within just a few simple steps you can create and customize the subscription form to match your need. Just download the plugin, integrate it with Elastic Email API, add the visuals, and start increasing your subscribers. We provide you with step by step guidelines and screens, but if you need any further assistance, we are here for you, 24/7. Features Customize widgets Visual color mixer GDPR Consent Double opt-in Custom double opt-in templates Integrations with Google reCaptcha v2 invisible Reports Contact list menage Send test Error log How Elastic Email Subscribe Form works? Elastic Email Subscribe Form replaces WordPress default wp_mail() function by using API integration with Elastic Email to send an outgoing email from your WordPress installation. Thanks to this, you can track all the parameters of your delivery, use Private IP addresses to get full control over your sending IP address, maintain reputation and delivery, and secure your data better than ever. But that is not all! Elastic Email Subscribe Form is also a widget you can further personalize to your needs. It’s compatible with almost every other plugin and you can also integrate it with reCaptcha v2 for additional security. Simply drag and drop the widget to the appropriate area to enable it on your page. You can also have more than one widget on your page, add, remove and edit the lists, and decide in which list the acquired emails should land. All of that without leaving your WordPress dashboard. How to get started? Just sign up to your Elastic Email account, copy the API Key and then, please log in to your WordPress dashboard, add the Elastic Email Sender plugin and paste there the API Key from your Elastic Email account. How to use Elastic Email Subscribe Form? Help article About Elastic Email Elastic Email is an all-in-one email delivery platform. We offer an SMTP Relay, robust HTTP API, and a User Interface that has a complete suite of tools and features for managing contacts, templates, campaigns, and reports. We specialize in delivering transactional and marketing email. Translations You can translate the Elastic Email Subscribe Form on translate.wordpress.org.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C