MailPoet – Newsletters, Email Marketing, and Automation

WordPress plugin · mailpoet · WordPress.org ↗

Critical

High

Known total

Unfixed

Running MailPoet – Newsletters, Email Marketing, and Automation on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 4.8	MailPoet – Newsletters, Email Marketing, and Automation [mailpoet] < 5.5.2 WPVulnerability · PoC available	< 5.5.2	v5.5.2	CVE-2024-12743	Mar 6, 2025
MEDIUM CVSS 6.1	MailPoet – Newsletters, Email Marketing, and Automation [mailpoet] < 5.3.2 WPVulnerability · PoC available	< 5.3.2	v5.3.2	CVE-2024-10103	Oct 29, 2024
MEDIUM CVSS 6.1	MailPoet – Newsletters, Email Marketing, and Automation [mailpoet] < 3.23.2 WPVulnerability	< 3.23.2	v3.23.2	CVE-2019-11843	Apr 16, 2019
UNKNOWN	MailPoet – Newsletters, Email Marketing, and Automation [mailpoet] < 5.33.1 WPVulnerability	< 5.33.1	v5.33.1	CVE-2026-57626	Jul 21, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.