WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
subscribe-to-comments-reloaded
Published
2024-04-05
Title
Subscribe To Comments Reloaded < 240119 - Unauthenticated Sensitive Information Exposure
Slug
subscribe-to-comments-reloaded
Published
2026-05-04
Title
Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management
Slug
subscribe-to-download
Published
2025-09-26
Title
Subscribe to Download < 2.1.0 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-download
Published
2025-09-26
Title
Subscribe to Download < 2.1.0 - Missing Authorization
Slug
subscribe-to-download
Published
2025-07-04
Title
Subscribe to Download < 2.1.0 - Unauthenticated PHP Object Injection
Slug
subscribe-to-download-lite
Published
2025-03-27
Title
Subscribe to Download Lite < 1.3.0 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-download-lite
Published
2025-03-29
Title
Subscribe to Download Lite < 1.3.0 - Authenticated (Subscriber+) Local File Inclusion
Slug
subscribe-to-unlock
Published
2025-09-26
Title
Subscribe To Unlock <= 1.1.5 - Missing Authorization
Slug
subscribe-to-unlock
Published
2025-09-26
Title
Subscribe To Unlock <= 1.1.5 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-unlock-lite
Published
2025-04-16
Title
Subscribe to Unlock Lite < 1.3.1 - Authenticated (Contributor+) Local File Inclusion
Slug
subscribe-to-unlock-lite
Published
2025-12-24
Title
Subscribe to Unlock Lite < 1.3.1 - Authenticated (Subscriber+) Local File Inclusion
Slug
subscribe2
Published
2014-08-01
Title
Subscribe2 <= 8.0 - Cross Site Scripting
Slug
subscribe2
Published
2014-10-01
Title
Subscribe2 < 10.16 - XSS
Slug
subscribe2
Published
2022-12-22
Title
Subscribe2 < 10.38 - User Deletion via CSRF
Slug
subscribe2
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Missing Access Controls
Slug
subscribe2
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Sending Emails via CSRF
Slug
subscribe2
Published
2025-02-18
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.44 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
Slug
subscribe2
Published
2026-02-03
Title
Subscribe2 < 10.45 - Missing Authorization
Slug
subscribe2
Published
2026-08-03
Title
Subscribe2 < 10.46 - Reflected XSS via email Parameter
Slug
subscribe2
Published
2026-08-17
Title
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.46 - Unauthenticated Stored Cross-Site Scripting
Slug
subscriber
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
subscribers-com
Published
2023-04-19
Title
Subscribers - Free Web Push Notifications < 1.5.4 - Admin+ Stored XSS
Slug
subscribers-text-counter
Published
2023-08-04
Title
Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS
Slug
subscription
Published
2026-03-05
Title
Subscription for WooCommerce – WordPress Recurring Payments Plugin < 1.8.11 - Authenticated (Customer+) Insecure Direct Object Reference
Slug
subscription
Published
2026-05-25
Title
Subscription & Recurring Payment for WooCommerce < 1.9.2 - Cross-Site Request Forgery