Subscribe2
This hub aggregates every CVE we track for Subscribe2. Use it to gauge the current risk picture and drill into individual advisories.
other
6
CVEs tracked
0
Critical
1
High
0
In CISA KEV
Severity distribution
MEDIUM4LOW1HIGH1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
2024-102026-09
Latest CVEs
The 6 most recently published vulnerabilities affecting Subscribe2.
- CVE-2026-73393WordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-24944WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerability6.5
- CVE-2023-1844Subscribe2 <= 10.40 - Missing Authorization4.3
- CVE-2023-3407Subscribe2 <= 10.40 - Cross-Site Request Forgery4.3
- CVE-2022-4309Subscribe2 < 10.38 - User Deletion via CSRF3.1
- CVE-2014-6604Cross-site scripting (XSS) vulnerability in class-s2-list-table.php in the Subscribe2 plugin before 10.16 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ip par...6.1
Product normalization is registry-driven with AI assist and human review. How it works