Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Elastic Email Clear all filters
TI-2025-40946 CVE-2025-66525 · GHSA-98gq-3jvx-3x4w

WordPress Elastic Email Sender plugin <= 1.2.20 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Sender: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2025-12-09 No fix listed CWE-862
TI-2025-20928 CVE-2025-28985 · GHSA-v2rm-fxfj-qw78

WordPress Elastic Email Subscribe Form plugin <= 1.2.2 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form elastic-email-subscribe-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Subs…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862