Email Reminders

Email Reminders has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Email Reminders has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Email Reminders is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Email Reminders vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-11945

Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Read the full analysis

Vulnerability Records

2 records
Email Reminders banner
Latestv2.0.7

Email Reminders

wpdevelop

Author

wpdevelop

3.5(2)
70/100
Last Updated
2025-12-03 (9mo ago)
Active Installs
100+
Downloads
7,894
Requires WP
4.0+
Requires PHP
5.6+
Tested up to
WP 6.9.7
Created
2020-08-04 (6y ago)

Reminders it’s ready to send emails, that was created based on Rules from specific Contacts. It can be emails that are sending before or after specific time to the event from Contact data. Like follow-up emails or friendly reminders about upcoming events. Plugin Homepage | Support FEATURES Reminders Create and send email reminders and follow-up emails. Automatic sending of email reminders via CRON. Manually send specific email reminder(s) from admin panel. Listing and real time (ajax) text searching of specific email reminder at reminders page. You can easily send or delete certain reminder. You can filter reminders to show only sent or waiting to send emails reminders, or both. Checking the status near each reminder (sent or not sent), as well as the name of the email template that uses the specific email reminder. Contacts Easily create new contact based on customized contact form. Ability to import contacts from CSV files. Native integration with [Booking Calendar] (https://wordpress.org/plugins/booking/ “Booking Calendar”) plugin. Import all existing bookings. Create contacts in real time after creation of new bookings. Real time (ajax) text searching of specific contact. Ability to edit contact details and deletion of specific contacts. Rules Rules configuration for creation of new email-reminders from existing contacts based on multiple parameters. For example, creation new email-reminders from contacts, where country is USA, and date of creation of contact 7 days ago, etc… Configuration of time based parameters, which provide ability to configure rules, like: “reminder – 1 day before the event”, “follow-up email – 7 days after the event”, “after 1.5 months”, etc… Ability to create several email templates and select specific email template for specific rules for creation of email reminders. Manually run specific rule to create email reminders from admin panel. Automatic creation of email reminders via CRON. Ability to edit rule details and delete of specific rules. If you have thousands of contacts, and you only need to handle the latest and not all together, you can define contact ID from which the rule will be executed. Mobile friendly. Ajax based admin panel. EMAIL REMINDERS IS GREAT FOR Send friendly reminders about upcoming events. Send follow-up emails after specific action.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C