MailUp Auto Subscription

MailUp Auto Subscription has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for MailUp Auto Subscription has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO. MailUp Auto Subscription is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all MailUp Auto Subscription vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-13521

MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-01-27 18:48	MailUp Auto Subscription <= 1.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting MailUp Auto Subscription <= 1.1.0	`CVE-2024-13521`	6.1 Medium	SOPROBRO	Yes

Showing 1–1 of 1 reports

Latestv1.2.0

MailUp Auto Subscription

Author

ilGhera

5.0(1)

100/100

Last Updated

2025-06-13 (1y ago)

Active Installs

50+

Downloads

4,266

Requires WP

4.0+

Requires PHP

Tested up to

WP 6.8.8

Created

2015-04-22 (12y ago)

If you’re using MailUp as newsletter service, you can add your users to it in the same time they’re registering to your site. You’ll be able to set the MailUp List ID, Group ID and much more.

View on WordPress.org