WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
subitem-al-slider
Published
2026-02-06
Title
Subitem AL Slider <= 1.0.0 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
subpage-view
Published
2025-05-02
Title
Subpage List <= 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
subscribe-sidebar
Published
2020-08-31
Title
Subscribe Sidebar <= 1.3.1 - Authenticated Reflected Cross-Site Scripting
Slug
subscribe-to-category
Published
2023-07-20
Title
Subscribe to Category <= 2.7.4 - Unauthenticated SQLi
Slug
subscribe-to-comments
Published
2015-07-14
Title
Subscribe to Comments < 2.3 - Authenticated Local File Inclusion
Slug
subscribe-to-comments
Published
2006-09-17
Title
Subscribe to Comments < 2.0.8 - Reflected XSS
Slug
subscribe-to-comments
Published
2024-10-29
Title
Subscribe to Comments < 2.3.1 - Reflected Cross-Site Scripting
Slug
subscribe-to-comments-reloaded
Published
2014-08-01
Title
Subscribe To Comments Reloaded 140204 - options/index.php manager_page Parameter Stored XSS Weakness
Slug
subscribe-to-comments-reloaded
Published
2014-08-01
Title
Subscribe To Comments Reloaded 140204 - options/index.php Admin Settings Manipulation CSRF
Slug
subscribe-to-comments-reloaded
Published
2015-08-20
Title
Subscribe To Comments Reloaded < 150820 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
subscribe-to-comments-reloaded
Published
2022-04-29
Title
Subscribe To Comments Reloaded < 220502 - Multiple CSRF
Slug
subscribe-to-comments-reloaded
Published
2024-04-05
Title
Subscribe To Comments Reloaded < 240119 - Unauthenticated Sensitive Information Exposure
Slug
subscribe-to-download
Published
2025-09-26
Title
Subscribe to Download < 2.1.0 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-download
Published
2025-09-26
Title
Subscribe to Download < 2.1.0 - Missing Authorization
Slug
subscribe-to-download
Published
2025-07-04
Title
Subscribe to Download < 2.1.0 - Unauthenticated PHP Object Injection
Slug
subscribe-to-download-lite
Published
2025-03-27
Title
Subscribe to Download Lite < 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-download-lite
Published
2025-03-29
Title
Subscribe to Download Lite < 1.3.0 - Authenticated (Subscriber+) Local File Inclusion
Slug
subscribe-to-unlock
Published
2025-09-26
Title
Subscribe To Unlock <= 1.1.5 - Missing Authorization
Slug
subscribe-to-unlock
Published
2025-09-26
Title
Subscribe To Unlock <= 1.1.5 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-unlock-lite
Published
2025-04-16
Title
Subscribe to Unlock Lite < 1.3.1 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-unlock-lite
Published
2025-12-24
Title
Subscribe to Unlock Lite < 1.3.1 - Authenticated (Subscriber+) Local File Inclusion
Slug
subscribe2
Published
2014-08-01
Title
Subscribe2 <= 8.0 - Cross Site Scripting
Slug
subscribe2
Published
2014-10-01
Title
Subscribe2 < 10.16 - XSS
Slug
subscribe2
Published
2022-12-22
Title
Subscribe2 < 10.38 - User Deletion via CSRF
Slug
subscribe2
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Missing Access Controls