Plugin icon

Subscribe2 – Form, Email Subscribers & Newsletters

subscribe2

Vulnerabilities:

7

Last Updated:

December 29, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-02-03
Title
Subscribe2 < 10.45 - Missing Authorization
Fixed in
Fixed in 10.45
CVSS
5.3 (medium)
Published
2025-02-18
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.44 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
Fixed in
Fixed in 10.44
CVSS
7.2 (high)
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Missing Access Controls
Fixed in
Fixed in 10.41
CVSS
4.3 (medium)
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Sending Emails via CSRF
Fixed in
Fixed in 10.41
CVSS
4.3 (medium)
Published
2022-12-22
Title
Subscribe2 < 10.38 - User Deletion via CSRF
Fixed in
Fixed in 10.38
CVSS
7.1 (high)
Published
2014-10-01
Title
Subscribe2 < 10.16 - XSS
Fixed in
Fixed in 10.16
CVSS
6.1 (medium)
Published
2014-08-01
Title
Subscribe2 <= 8.0 - Cross Site Scripting
Fixed in
Fixed in 8.1
CVSS
n/a