Manage Notification E-mails

Manage Notification E-mails has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Improper Authorization.

Every one of the 2 issues recorded for Manage Notification E-mails has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Manage Notification E-mails is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.1/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Manage Notification E-mails vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-34654

Manage Notification E-mails <= 1.8.2 - Cross-Site Request Forgery to Plugin Options Update

Read the full analysis

Vulnerability Records

2 records
Manage Notification E-mails banner
Latestv1.8.6

Manage Notification E-mails

3D Virge

Author

3D Virge

4.8(54)
96/100
Last Updated
2026-07-21 (2mo ago)
Active Installs
100,000+
Downloads
863,198
Requires WP
4.0.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2015-09-07 (11y ago)

With this plugin you can switch the different WordPress notification e-mails on and off, like options as the new user and password change notifications send by WordPress to the administrator and user. Works perfectly in combination with a lot of other plugins! Watch this nice tut made by Robert Orzanna: The options you can manage are: New user notification to admin New user notification to user Notify post author Notify moderator Password change notification to admin Password change notification to user E-mail address change notification to user Forgotten password e-mail to user Forgotten password e-mail to administrator Automatic WordPress core update e-mail Automatic WordPress plugin update e-mail Automatic WordPress theme update e-mail Send admin notifications to extra admin e-mail addresses (1.7.0) Send an e-mail to administrators after a user requested to update his or her e-mail address (1.7.0) Send an e-mail to administrators after a user successfully updated his or her e-mail address (1.7.0) Multi-site support! Now you can manage your notification settings in one single environment (1.8.0) Export and import settings (1.8.0) The automatic core, plugin, and theme updates have a special built-in feature. When one of these options is disabled, successful e-mails don’t get send out, but failed updates still will send an e-mail to the admin. This version contains some nice new stuff. If you find any issues, let me know. If you like the new features, please be so kind to give this plugin a good rating! It will help me to keep up the good work for you 🙂 Want regular updates? Feel free to support me with a small donation 🙂

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C