WordPress plugin
Email Subscription Popup — Newsletter & GDPR Consent security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium7
- Low0
All Email Subscription Popup — Newsletter & GDPR Consent vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.2.26Update to 1.2.27 | CVE-2025-49912 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤1.2.23Update to 1.2.24 | CVE-2025-24587 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode ≤1.2.22Update to 1.2.23 | CVE-2024-11195 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤1.2.20Update to 1.2.21 | CVE-2024-27960 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.19Update to 1.2.20 | CVE-2023-6555 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.18Update to 1.2.19 | CVE-2023-6527 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.2.17Update to 1.2.17 | CVE-2023-30489 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.2.26Update to 1.2.27
- Medium4.9Authenticated (Administrator+) SQL Injection
≤1.2.23Update to 1.2.24
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via print_email_subscribe_form Shortcode
≤1.2.22Update to 1.2.23
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤1.2.20Update to 1.2.21
- Medium6.1Reflected Cross-Site Scripting
≤1.2.19Update to 1.2.20
- Medium6.1Reflected Cross-Site Scripting
≤1.2.18Update to 1.2.19
- Medium6.1Reflected Cross-Site Scripting
<1.2.17Update to 1.2.17
Email Subscription Popup — Newsletter & GDPR Consent: common questions
Does Email Subscription Popup — Newsletter & GDPR Consent have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Email Subscription Popup — Newsletter & GDPR Consent: 7 medium. None are known to affect version null.
How do I check which version of Email Subscription Popup — Newsletter & GDPR Consent I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Email Subscription Popup — Newsletter & GDPR Consent vulnerability?
CVE-2025-49912, published Oct 22, 2025: Email Subscription Popup <= 1.2.26 - Authenticated (Administrator+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any Email Subscription Popup — Newsletter & GDPR Consent vulnerability listed in CISA KEV?
No. None of the known Email Subscription Popup — Newsletter & GDPR Consent vulnerabilities is currently listed in the CISA KEV catalog.