Email Users

Email Users has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2022; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2016 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2022.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Email Users vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2022-1605

Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2022-05-18 00:00	Email Users <= 4.8.8 - Arbitrary Settings Update via Cross-Site Request Forgery Email Users <= 4.8.8	`CVE-2022-1605`	8.8 High	Daniel Ruf	No
2016-08-15 00:00	Email Users < 4.8.4 - Cross-Site Request Forgery Email Users < 4.8.4	`N/A`	4.3 Medium	Julien Rentrop	Yes
2016-07-13 00:00	Email Users <= 4.8.2 - Reflected Cross-Site Scripting Email Users < 4.8.3	`N/A`	6.1 Medium	Yorick Koster,	Yes
2015-08-10 00:00	Email Users <= 4.7.5 - Reflected Cross Site Scripting Email Users < 4.7.6	`N/A`	5.3 Medium	Marcin Probola	Yes

Showing 1–4 of 4 reports