Read the docs

Elastic Email

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Elastic Email records in CISA KEV

No Elastic Email vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Elastic Email Sender 1 record LOW

Records

3 records

TI-2025-20928 CVE-2025-28985 · GHSA-v2rm-fxfj-qw78

WordPress Elastic Email Subscribe Form plugin <= 1.2.2 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form elastic-email-subscribe-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Subs…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862
TI-2025-40946 CVE-2025-66525 · GHSA-98gq-3jvx-3x4w

WordPress Elastic Email Sender plugin <= 1.2.20 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Sender: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2025-12-09 No fix listed CWE-862
Open these records in search →