WordPress Plugin Vulnerabilities

Subscribe2 <= 8.0 - Cross Site Scripting

Description

The Subscribe2 – Form, Email Subscribers & Newsletters WordPress plugin was affected by a Cross Site Scripting security vulnerability.

Affects Plugins

Plugin icon
subscribe2
Fixed in 8.1

References

URL
https://packetstormsecurity.com/files/#112688/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
60c347e3-5c52-42c2-991c-c52de3abc310

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2023-09-05
Title
WordPress Social Login <= 3.0.4 - Contributor+ Stored XSS
Published
2015-05-20
Title
uDesign Theme 1.8.0-2.7.9 - DOM Cross-Site Scripting (XSS)
Published
2024-01-30
Title
CC BMI Calculator < 2.1.0 - Contributor+ Stored XSS
Published
2022-05-02
Title
Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting
Published
2024-02-12
Title
PJ News Ticker <= 6.8.10 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode