PatchTheCVE: wp email capturehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-28421: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Markehttps://patchthecve.com/cve/CVE-2023-28421.htmlhttps://patchthecve.com/cve/CVE-2023-28421.htmlWed, 17 Jun 2026 05:47:40 +0000MEDIUM 5.3: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Winwar Media WordPress Email Marketing Plugin – WP Email Capture.This issue affects WordPress Email Marketing Plugin – WP Email Capture: from n/a through 3.10.CVE-2023-23724: Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.https://patchthecve.com/cve/CVE-2023-23724.htmlhttps://patchthecve.com/cve/CVE-2023-23724.htmlWed, 17 Jun 2026 05:37:48 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.CVE-2023-23723: Authhttps://patchthecve.com/cve/CVE-2023-23723.htmlhttps://patchthecve.com/cve/CVE-2023-23723.htmlWed, 17 Jun 2026 05:37:48 +0000MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions.