Source evidence

Wordfence vulnerability

Email Tracker · support · 2025-08-11T17:42:00+00:00

Email Tracker plugin evidence original source source API

mixedsentiment

highseverity

0.94relevance

5replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 34 rows with source links

17.6% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

28 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

koullis resolved

just got a notice from wordfence that plugin is vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection Freemius SDK <= 2.4.2 – Missing Authorization Checks https://www.wordfence.com/threat-intel/vulnerabilities/detail/freemius-sdk-242-missing-authorization-checks https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/email-tracker The Email Tracker 5.3.14 (Latest release) version uses the Freemius SDK 2.12.1 version, the latest Email Tracker 5.3.14 version has no vulnerability. Update the Email Tracker plugin. its already updated but why wordfence still picks it up as vulnerable? @koullis Thanks for reporting it. Let me connect with Wordfence team. Once I will get update, I will update you here. ok thanks will wait for your update The Wordfence team has just marked the Email Tracker plugin as patched, so the Email Tracker plugin issue has been resolved.

Commercial Context

Opportunity

lead capture reliability

Email lead-capture reliability for protecting form submissions and lead routing

Buyer: marketing teams, agencies, and lead-generation site owners

Wedge: monitor email submissions, notification delivery, spam, and CRM handoffs

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Wordfence vulnerability: users show security, bugs, missing feature pain that may indicate a product gap.

Evidence quote: Wordfence vulnerability just got a notice from wordfence that plugin is vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection Freemius SDK <= 2.4.2 – Missing Authorization Checks https://www.wordfence.com/threat-intel/vulnerabilities/detail/freemius-sdk-242-missing-authorization-checks https

Affected feature: email

security bugs missing feature support

Plugin

API

Email Tracker

800 active installs · 27.9K downloads · rating 88.0

email email analytics email log email tracking emails

Comments

5 shown

Prashant Baldha 2025-08-13T05:05:00+00:00

The Email Tracker 5.3.14 (Latest release) version uses the Freemius SDK 2.12.1 version, the latest Email Tracker 5.3.14 version has no vulnerability. Update the Email Tracker plugin.

koullis 2025-08-13T09:43:00+00:00

its already updated but why wordfence still picks it up as vulnerable?

Prashant Baldha 2025-08-14T13:26:00+00:00

@koullis Thanks for reporting it. Let me connect with Wordfence team. Once I will get update, I will update you here.

koullis 2025-08-14T14:05:00+00:00

ok thanks will wait for your update

Prashant Baldha 2025-08-14T14:35:00+00:00

The Wordfence team has just marked the Email Tracker plugin as patched, so the Email Tracker plugin issue has been resolved.