Easy Email Subscription

Easy Email Subscription has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, SQL Injection.

Every one of the 3 issues recorded for Easy Email Subscription has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Muhammad Yudha - DJ. Easy Email Subscription is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

5.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Easy Email Subscription vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2025-11994

Easy Email Subscription <= 1.3 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2025-11-11 21:45	Easy Email Subscription <= 1.3 - Unauthenticated Stored Cross-Site Scripting Easy Email Subscription <= 1.3	`CVE-2025-11994`	7.2 High	Muhammad Yudha - DJ	Yes
2025-11-05 15:20	Easy Email Subscription <= 1.3 - Cross-Site Request Forgery to Arbitrary Subscriber Deletion Easy Email Subscription <= 1.3	`CVE-2025-10691`	4.3 Medium	Muhammad Yudha - DJ	Yes
2025-11-05 14:24	Easy Email Subscription <= 1.3 - Authenticated (Admin+) SQL Injection via uid Easy Email Subscription <= 1.3	`CVE-2025-10683`	4.9 Medium	Muhammad Yudha - DJ	Yes

Showing 1–3 of 3 reports

Latestv1.3.1

Easy Email Subscription

Author

Yudiz Solutions Ltd.

3.0(2)

60/100

Last Updated

2025-11-03 (10mo ago)

Active Installs

20+

Downloads

5,474

Requires WP

3.6.1+

Requires PHP

5.6+

Tested up to

WP 6.8.8

Created

2015-01-08 (12y ago)

This Plugin allows widget drag n drop form with captcha to display in sidebars.You can also use shortcode to display form anywhere in the template or pages or post.

View on WordPress.org