Subscribe2 vulnerabilities | LiveThreat CVE Feed

Product

Subscribe2

by Subscribe2 Project · last CVE Jun 28, 2023

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 1

Severity

Exploitation

Watch

Add Subscribe2 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-6604	6.1	1%	Mar 29	Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or… Affected: before 10.16
CVE-2023-1844	4.3	1%	Jun 28	Subscribe2 <= 10.40 - Missing Authorization Affected: through 10.40
CVE-2023-3407	4.3	0%	Jun 28	Subscribe2 <= 10.40 - Cross-Site Request Forgery Affected: through 10.40
CVE-2022-4309	3.1	0%	Jan 16	Subscribe2 < 10.38 - User Deletion via CSRF Affected: before 10.38