Extension WordPress
Vulnérabilités Subscribe2 – Form, Email Subscribers & Newsletters
Cette page rassemble les failles publiées pour Subscribe2 – Form, Email Subscribers & Newsletters, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Subscribe2 – Form, Email Subscribers & Newsletters
10 fiches
Subscribe2 <= 10.44 – Missing Authorization
The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 10.44. This makes it possible for…
*-10.44
10.45
03/02/2026
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.43 – Unauthenticated Stored Cross-Site Scripting via IP Parameter
The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ip parameter in all versions up to, and including, 10.43 due to insufficient input sanitization and output escaping. This…
*-10.43
10.44
18/02/2025
Appsero <= 2.0.0 – Missing Authorization via handle_optin_optout
The Appsero analytics tool used in several plugins is vulnerable to unauthorized modification of data due to a missing capability check on the handle_optin_optout function in versions up to, and including, 2.0.0. This makes it possible for unauthenticated…
*-10.42
10.43
11/04/2024
Subscribe2 <= 10.40 – Missing Authorization
The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sending test emails in versions up to, and including, 10.40. This makes it possible for author-level attackers to…
*-10.40
10.41
26/06/2023
Subscribe2 <= 10.40 – Cross-Site Request Forgery
The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40. This is due to missing or incorrect nonce validation when sending test emails. This makes it possible for unauthenticated attackers…
*-10.40
10.41
26/06/2023
Subscribe2 <= 10.37 – Cross-Site Request Forgery
The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.37. This is due to missing or incorrect nonce validation on the process_bulk_action function. This makes it possible for unauthenticated attackers…
*-10.37
10.38
22/12/2022
Appsero <= 1.2.1 – Missing Authorization
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible…
*-10.37
10.38
16/12/2022
Appsero <= 1.2.0 – Cross-Site Request Forgery
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it…
*-10.37
10.38
14/12/2022
Subscribe2 – Form, Email Subscribers & Newsletters <= 10.15 – Stored Cross-Site Scripting
The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REMOTE_ADDR value in versions up to, and including, 10.15 due to insufficient input sanitization and output escaping. This makes…
[*, 10.16)
10.16
01/10/2014
Subscribe2 – Form, Email Subscribers & Newsletters < 8.1 – Multiple Cross-Site Scripting
The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress is vulnerable to Multiple Cross-Site Scripting via several parameters in versions before 8.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers…
[*, 8.1)
8.1
01/08/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.