Elastic Email

Products

ProductCVEsExploitedLatest
Elastic Email Sender1–Dec 9, 2025
Elastic Email Subscribe Form1–Jun 6, 2025

Exploited and recent CVEs

  • CVE-2025-66525 Medium 4.3 WordPress Elastic Email Sender plugin <= 1.2.20 - Broken Access Control vulnerability 0.3%
  • CVE-2025-28985 Medium 5.4 WordPress Elastic Email Subscribe Form plugin <= 1.2.2 - Broken Access Control Vulnerability 0.3%