WP
Vendor
wpshuffle
12
CVEs
0
On KEV
1
New 30D
Products
FP7.2
Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms
wpshuffle
1 CVEs0 on KEV1 new
FP6.1
Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin
wpshuffle
4 CVEs0 on KEV0 new
ST9.8
Subscribe to Download
wpshuffle
3 CVEs0 on KEV0 new
ST7.5
Subscribe To Unlock
wpshuffle
2 CVEs0 on KEV0 new
FP4.3
Frontend Post Submission Manager
Wpshuffle
1 CVEs0 on KEV0 new
WS4.3
WP Subscription Forms PRO
wpshuffle
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-96649 | FP Frontend Post Submission Manager Lite – Guest Post and Frontend Submission Forms wpshuffle | 7.2 | Sep 30 | Frontend Post Submission Manager Lite <= 1.3.4 - Unauthenticated Stored DOM-Based Cross-Site Scripting via post_content Parameter (data-label DOM Sink) |
| CVE-2026-1296 | FP Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin wpshuffle | 6.1 | Feb 18 | Frontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' Parameter |
| CVE-2025-14913 | FP Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin wpshuffle | 5.3 | Dec 25 | Frontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment Deletion |
| CVE-2025-14080 | FP Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin wpshuffle | 5.3 | Dec 21 | Frontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post Modification |
| CVE-2025-60224 | ST Subscribe to Download wpshuffle | 9.8 | Oct 22 | WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability |
| CVE-2025-60166 | WS WP Subscription Forms PRO wpshuffle | 4.3 | Sep 26 | WordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion Vulnerability |
| CVE-2025-60153 | ST Subscribe To Unlock wpshuffle | 7.5 | Sep 26 | WordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion Vulnerability |
| CVE-2025-60152 | ST Subscribe To Unlock wpshuffle | 4.3 | Sep 26 | WordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control Vulnerability |
| CVE-2025-60150 | ST Subscribe to Download wpshuffle | 7.5 | Sep 26 | WordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerability |
| CVE-2025-60148 | ST Subscribe to Download wpshuffle | 4.3 | Sep 26 | WordPress Subscribe to Download plugin <= 2.0.9 - Broken Access Control vulnerability |
| CVE-2024-8427 | FP Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin wpshuffle | 4.3 | Sep 6 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update |