Subscribe to Download Lite – Email Before Download Plugin

Subscribe to Download Lite – Email Before Download Plugin has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 2 of the records (100%).

Every one of the 2 issues recorded for Subscribe to Download Lite – Email Before Download Plugin has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by LVT-tholv2k. Subscribe to Download Lite – Email Before Download Plugin is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
8.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Subscribe to Download Lite – Email Before Download Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-30782

Subscribe to Download Lite <= 1.2.9 - Authenticated (Subscriber+) Local File Inclusion

Read the full analysis

Vulnerability Records

2 records
Subscribe to Download Lite – Email Before Download Plugin banner
Latestv1.3.0

Subscribe to Download Lite – Email Before Download Plugin

WP Shuffle

Author

WP Shuffle

3.0(4)
60/100
Last Updated
2026-05-23 (4mo ago)
Active Installs
400+
Downloads
19,955
Requires WP
5.0+
Requires PHP
7.0.0+
Tested up to
WP 7.0.4
Created
2019-07-03 (7y ago)

Subscribe to Download Lite helps you grow your email list by offering a downloadable file after signup. Add the form to any page, collect subscriber details, and automatically send the download link by email. Use it for lead magnets, free PDFs, checklists, ebooks, resource packs, templates, or any other downloadable freebie you want to send after subscription. If you do not want to offer a file, you can also use it as a simple email signup form. This plugin is built for site owners who want a straightforward “email before download” workflow without building a custom funnel from scratch. Best For Delivering a free download after email signup Collecting leads for newsletters and email marketing Offering ebooks, guides, templates, PDFs, and bonus resources Gating downloadable content behind a signup form Subscribe to Download Lite Features Download After Signup: Send your downloadable file to the subscriber after a successful signup. 5 Ready-to-Use Templates: Choose a form design and place it on your site quickly. Encrypted Download Links: Protect your downloadable file with secure email links. Popup Subscription Form: Show the signup form in a popup to increase conversions. Ajax Submission: Let users subscribe without a full page reload. CSV Export: Export subscriber data from your WordPress dashboard. Form Component Control: Enable or disable form fields based on your signup flow. Email Customization: Customize sender name, sender email, and email message. Backend Preview: Preview your signup form before publishing it. Mobile Responsive: Forms are designed to work across desktop and mobile devices. Translation Ready: Translate the plugin for multilingual sites. Why Site Owners Use It Grow your email list with a clear value exchange Deliver lead magnets automatically instead of manually emailing files Keep your free download links more secure Start with a free setup before moving to advanced marketing workflows Video Walkthrough Upgrade to Pro for More Create Unlimited Form with different restrictions 20 Pre Designed Subscription Form Templates Show popup form with delay on individual page Custom Form Styler Available Mailchimp, Constant Contact, MailerLite and other marketing integrations Track Download Status And many more … Check all premium features here Upgrade to PRO To upgrade to pro, please go here To check demo, please go here

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C